LHa: Multiple vulnerabilities

Background LHa is a console-based program for packing and unpacking LHarc archives. Description Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error and a buffer...

Mono: Insecure temporary file creation

Background Mono provides the necessary software to develop and run .NET client and server applications. Description Sebastian Krahmer of the SuSE Security Team discovered that the System.CodeDom.Compiler classes of Mono create temporary files with insecure permissions. Impact A local attacker cou...

[Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Evolve shopping cart Method: SQL Injection PoC: http://target/path/products.asp?partno=SQL INJECTION Contact:...

Clickblog Sql Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Click Blog Method: SQL injection PoC: http://target/displayCalendar.asp?date=SQL Injection Contact: [email protected]...

ClickGallery Sql Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Click Gallery Method: SQL Injection And XSS Vendor:ClickGallery.net PoC: http://target/viewgallery.asp?galleryid=809&currentpage=SQ...

PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST - Advisory 30 - 2006-11-24 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...

[Aria-Security Team] ASP ListPics 5.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC:...

HSRS 1.0 - addcode.php Remote File Inclusion

HSRS 1.0 - addcode.php Remote File Inclusion --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script...

telaen110.txt

!/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hackin...

My-BIC => 0.6.5 Remote File Include Vulnerability

No description provided by source. !/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We...

A-Cart 2.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=31 ----------------------------------------------------------- Software: A-Cart 2.0 Vendor: http://alanward.net/acart/ Method: SQL...

[Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=33 ----------------------------------------------------------- Software: ActiveNews Manager Method: SQL Injection And Cross Site...

A-Cart PRO SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=32 ----------------------------------------------------------- Software: A-Cart Pro Vendor: http://alanward.net/acart/ Method: SQL...

texasrankem.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=34 ----------------------------------------------------------- Software: Texas Rank'em Method: SQL Injection Vendor:http://texasrankem.com/ PoC: http://target/path/player.asp?playerid=14&selPlayer=S...

cpanel10-xss2.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=30 ----------------------------------------------------------- Software: CPanel Tested On CPanel 10 CPanel Network Tools PoC: http://target:2082/frontend/x/net/dnslook.html?dns=XSS P.S : Attacker...

disclosure004-rfi.pl.txt

!/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hackin...

redblog.pl.txt

!/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hackin...

mybic065-rfi.pl.txt

!/usr/bin/perl My-BIC = 0.6.5 Remote File Include Vulnerability Exploit Script.............. : My-BIC Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We ArE : Scorpiunix , KAMY4r , Sh3ll ,...

Myphotos-rfi.pl.txt

!/usr/bin/perl Myphotos = Remote File Include Vulnerability Script.............. : Myphotos Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We ArE : Scorpiunix , KAMY4r , Sh3ll , SilliCONI...

worksystem-rfi.txt

!/usr/bin/perl worksystem = Remote File Include Vulnerability Exploit Script.............. : WORK system e-commerce Expl0iter.... : theEdit0r Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.Xmors.com Pablic http://Www.Xmors.net pirv8 We ArE : Scorpiunix ,...