phpMyChat0146.txt

phpMyChat Multiple XSS vulnerabilities. I. BACKGROUND phpMyChat is an easy-to-install, easy-to-use multi-room chat based on PHP and a database, supporting MySQL, PostgreSQL, and ODBC. II. DESCRIPTION phpMyChat 0.14.6 startpage.css.php, style.css.php, userspopupL.php are prone to Cross-site...

vTiger CRM 4.2 - SQL Injection

vTiger CRM 4.2 - SQL Injection source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HTML...

[Full-disclosure] ExoPHPDesk is helpdesk written in PHP/SQL.

=========================================================== ============================================================ Title: ExoPHPDesk Multiple Remote Vulnerabilities Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 15/11/2005 Severity: High. Remote Users...

[Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution

ZDI-05-002: Clam Antivirus Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-05-002.html November 4th, 2005 -- CVE ID: CAN-2005-3303 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87 -- TippingPointTM IPS Customer Protectio...

RBExplorer 1.0 (Hijacking Command) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ RBExplorer 1.0 Hijacking Command Denial of Service Exploit ============================================================ !usr/bin/perl RBExplorer Hijack Command Exploit...

RBExplorer 1.0 - Hijacking Command Denial of Service

!usr/bin/perl RBExplorer Hijack Command Exploit ---------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.kabrian.com /[email protected] use IO::Socket; if @ARGV != 3 print "\n RBExplorer Hijack Command Exploit\n"; print...

Denial of service vulnerability in X-Chat for Windows from Silverex.org

Critical Security research group found a denial of service vulnerability in X-Chat for Windows from Silverex.org. Vulnerable versions: 2.4.5-1 and prior. Vulnerable code: define MAXLINE 300 for x = 2; wordx0 != '0'; ++x strncatinfo, wordx, MAXLINE; strncatinfo, " ", MAXLINE; Proof of concept: Pla...

COOL! Remote Control 1.12 - Remote Denial of Service

!usr/bin/perl COOL! Command Execution DOS Exploit -------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: www.yaosoft.com If Remote ControlClient application is running then already connected to server, this command exploit will made...

FTP Internet Access Manager 1.2 - Command Execution

!usr/bin/perl FTP Internet Access Manager Command Exploit ---------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: www.softfolder.com/internetaccessmanager.html use IO::Socket; if @ARGV != 4 print "\n FTP Internet Access Manager Comman...

FTP Internet Access Manager <= 1.2 Command Execution Exploit

Exploit for unknown platform in category remote exploits ============================================================ FTP Internet Access Manager newProto="tcp", PeerAddr=$adr, PeerPort=21, Reuse=1 or die "Error: can't connect to $adr:21\n"; $chr1 = "\x55\x53\x45\x52"; $chr2 = "\x50\x41\x53\x53";...

P2P Pro 1.0 (command) Denial of Service Exploit

No description provided by source. / P2P Pro Command DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.digital-revolution.org/P2PPro.html / include string.h include winsock2.h include stdio.h pragma commentlib,...

Free SMTP Server <= 2.2 Spam Filter Vulnerability

Exploit for unknown platform in category remote exploits ================================================= Free SMTP Server 1 die "usage: perl $0 IP/host \nExam: perl $0 127.0.0.1 \n" ; $adr = $ARGV0; $prt = "25"; Don't changes this one $act1 = "\x48\x45\x4c\x4f $helo"; $act2 = "\x4d\x41\x49\x4c...

Free SMTP Server 2.2 - Spam Filter

Free SMTP Server 2.2 - Spam Filter !usr/bin/perl FREE SMTP Spam Filter Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.softstack.com/ use IO::Socket; use Socket; print"\n FREE SMTP Spam Filter Exploit\n"; print"...

FreeStyle Wiki Arbitrary Command Injection Vulnerability

Secunia Advisory: SA16612 Release Date: 2005-08-30 Critical: Moderately critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: FreeStyle Wiki 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A...

Savant Web Server 3.1 - Remote Buffer Overflow (2)

!/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3 print "\nUsage: $0 remote IP Port\n"; print...

atutor151.txt

ATutor 1.5.1 and prior multiple XSS Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= ATutor 1.5.1 http://www.atutor.ca/ INFO: ===== ATutor 1.5.1 is a web based education portal. DESCRIPTION: ============ The system is vulnerable to various XSS attacks: --==XSS==-- Some examples -...

sbphpstatpoc.txt

? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, SWP, Trespasser... [email protected]...

isec-0023-coredump.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

easymsgb_advisory.txt

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Acunetix HTTP Sniffer Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================== Acunetix HTTP Sniffer Denial of Service Exploit =============================================== !/usr/bin/perl Acunetix HTTP Sniffer DOS Exploit ------------------------------------ Infam0us Gr0up -...