Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept

Exploit for linux platform in category dos / poc ===================================================== mpg123 0.59r Malformed mp3 SIGSEGV Proof of Concept ===================================================== !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind ...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

mpg123 0.59r - Malformed .mp3 SIGSEGV PoC !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

!/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug. $./mpg1DoS3 0 | mpg123 - - switch tells mpg123 t...

qwikiXSS.txt

Software - QwikiWiki Version - v1.4 Type - XSS Vulnerability Powered by QwikiWiki v1.4 - www.qwikiwiki.com Examples: http://host/index.php?page=" http://host/index.php?page=" Found by Dr^Death of Suicide Scene Internet Security Group 2006...

QwikiWiki v1.4 XSS Vulnerability

Software - QwikiWiki Version - v1.4 Type - XSS Vulnerability Powered by QwikiWiki v1.4 - www.qwikiwiki.com Examples: http://host/index.php?page="body bgcolor="black"/body http://host/index.php?page="alertdocument.cookie;/script Found by Dr^Death of Suicide Scene Internet Security Group 2006...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

simpleBlogXSS.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

[SA18535] My Amazon Store Manager "q" Cross-Site Scripting Vulnerability

TITLE: My Amazon Store Manager "q" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18535 VERIFY ADVISORY: http://secunia.com/advisories/18535/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: My Amazon Store Manager 1.x http://secunia.com/product/6880/...

[SA18469] Netbula Anyboard "tK" Cross-Site Scripting Vulnerability

TITLE: Netbula Anyboard "tK" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18469 VERIFY ADVISORY: http://secunia.com/advisories/18469/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Netbula Anyboard 9.x http://secunia.com/product/2070/ DESCRIPTION:...

simpleBlog21.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

[SA18360] phpChamber "needle" Cross-Site Scripting Vulnerability

TITLE: phpChamber "needle" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18360 VERIFY ADVISORY: http://secunia.com/advisories/18360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpChamber http://secunia.com/product/6761/ DESCRIPTION: Preddy has...

[SA18309] Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability

TITLE: Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18309 VERIFY ADVISORY: http://secunia.com/advisories/18309/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Next Generation Image Gallery 0.x...

[SA17240] MailSite Express Attachment Upload Vulnerability

TITLE: MailSite Express Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA17240 VERIFY ADVISORY: http://secunia.com/advisories/17240/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MailSite 6.x http://secunia.com/product/5898/ DESCRIPTION: Soroush dalili has...

[SA16115] Hosting Controller Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit

Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and older Developer url: hostingcontroller.com Comment: Hostin...

[badroot security] probe.cgi: Remote Command Execution

BADROOT SECURITY GROUP Security Advisory 2005 - 0x06 http://www.badroot.org irc.us.azzurra.org badroot Authors ....... spher3 spher3 at fatalimpulse dot net Date .......... 04-07-2005 Product ....... probe.cgi Type .......... Remote Command Execution o Info: ================ That script is used t...

prowebExec.txt

BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...

cacti -- potential SQL injection and cross site scripting attacks

iDEFENSE security group disclosed potential SQL injection attacks from unchecked user input and two security holes regarding potential cross site scripting attacks...

MADSHEEP-05SA (security advisory): WebHints <= v1.03 Remote Command Execution Vulnerability

MADSHEEP-05SA security advisory: WebHints = v1.03 Remote Command Execution Vulnerability 06/11/2005 MADSHEEP-05SA security advisory: WebHints = v1.03 Remote Command Execution Vulnerability Published: 06 11 2005 Released: 06 11 2005 Name: WebHints Affected Systems: = 1.03 Issue: Remote Command...