IE_ONE_MINOR_ONE_MAJOR

REPORT NAME: PLEBO-2006.06.16-IEONEMINORONEMAJOR DESTINATION: To Publish EMAIL RECPT: bugtraq CONTENTS 0. IMPORTANT NOTICE 1. SUMMARY 2. READ CONTENT OF ANY DOMAIN - PROOF OF CONCEPT 3. READ CONTENT OF ANY DOMAIN - TIPS FOR MATURE EXPLOIT 4. DOUBLE-CLICK ANYWHERE ON WEB PAGE COULD ALLOW REMOTE CO...

Apple Mac OSX 10.4.x - OpenLDAP Denial of Service

source: https://www.securityfocus.com/bid/18728/info Mac OS X Open Directory Server is prone to a denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker can exploit this issue to cause a crash in the LDAP server, effectively denying service to legitimate...

Microsoft Excel 2003 - Hlink Stack Buffer Overflow (SEH)

!perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Manuel Santamarina Suarez The vulnerability was discovered by 'kcope'. First click on the link and then on the "Yes" button to cause the stack overflow. fixed shellcode location !! Must be free of Unicode null terminator...

Eduha Meeting php shell upload Vulnerabilities

Eduha Meeting php shell upload Vulnerabilities Site:http://eduha.forever.kz/ Demo:http://nextlevel.astrakhan.ru/meeting/ ---------------------------------------------------- Example: http://victim/path/index.php?act=add add photoupload php phpshell Bug Video:...

Joomla! 1.0.9 - Weblinks Blind SQL Injection

Joomla! 1.0.9 - Weblinks Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$stri...

Chipmailer <= 1.09 Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Chipmailer = 1.09 Multiple Vulnerabilities Release Date: 2006/06/13 Last Modified: 2006/06/13 Author: Tamriel tamriel at gmx dot net Application: Chipmailer = 1.09 Risk: Medium Vendor Status: no patch available Vendor Site: chipmailer.de...

blur6ex 0.3.462 - 'ID' Admin Disclosure / Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on ? echo "blur6ex = 0.3.462 'ID' blind SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by blur6ex"\r\n\r\n"; / works regardless of php.ini settings /...

asianxoXSS.txt

AsianXO.com Homepage: http://www.asianxo.com/ Effected files: directory.php profiles.php Input boxes of editing profile ---------------------------- XSS Vulnerability via dirid: Directory.php PoC: http://www.axo2.com/directory.php?dirid=1" inaurl injection along with tags, which also reveals some...

GUESTEX-exec.pl.txt

Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: GUESTEX-exec.pl Date: 06/07/2006 Version: 1.00 1.00 06/07/2006 - GUESTEX-exec.pl created Description: GUESTEX guestbook is vulnerable to remote code execution in how it handles it's 'email' parameter. $form'email' is used when openni...

MiraksGalerie <= 2.62 Multiple Remote command execution

/ Federico Fazzi, [email protected] / MiraksGalerie = 2.62 Multiple Remote command execution / 07/06/2006 4:58 Bug: pcltar.lib.php: line 34 - 35 --- if !isset$gpcltarlibdir $gpcltarlibdir = "lib"; etc.. --- galimage.lib.php: line: 157 - 158 --- for$i=count$listconfigfile-1; $i=0; $i--...

OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ OpenEMR = 2.8.1 Remote File Include Vulnerability $$ Script site: http://sourceforge.net/projects/openemr/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...

Claroline Multiple Script includePath Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'includePath' parameter before using it to include PHP code in the...

CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...

WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 path = Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$...

Web site XSS using BOM on UTF-8 pages — Mozilla

Masatoshi Kimura reports that the Unicode Byte-order-Mark BOM is stripped from UTF-8 pages during the conversion to Unicode before the parser sees the web page. As a result the parser will see and process script tags that web input sanitizers may miss because they appear as "scrBOMipt" or similar...

metajour 2.1 (system_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== metajour 2.1 systempath Remote File Include Vulnerabilities ============================================================== DEVIL TEAM THE BEST POLISH TEAM metajour 2.1 systempa...

metajour 2.1 - 'system_path' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM metajour 2.1 systempath - Remote File Include Vulnerabilities Script site: http://www.metajour.org Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi ;- Special greetz DragonHeart : Contact: [email protected] ...

Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm titlePass Change/title script language="JavaScript" //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" ||...

MiniNuke 2.x (create an admin) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=31 Usage: mini.pl host path user pass mail use IO::Socket; if@ARGV != 5 usage; else...

Hot Open Tickets 11012004 - CLASS_PATH Remote File Inclusion

Hot Open Tickets 11012004 - CLASSPATH Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or...