3222 matches found
gtetrinet -- remote code execution
The Debian Security Team reports: Michael Gehring discovered several potential out-of-bounds index accesses in gtetrinet, a multiplayer Tetris-like game, which may allow a remote server to execute arbitrary code...
NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability
NSFOCUS Security Advisory SA2006-08 Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability Release Date: 2006-08-25 CVE ID: CVE-2006-3869 http://www.nsfocus.com/english/homepage/research/0608.htm Affected systems & software =================== Internet Explorer 6 SP1 with MS06-042 -...
otopholder18.txt
vendor: http://www.jakeo.com vuln : http://host/foto/index.php?path=../../etc/passwd http://host/foto/index.php?path=xss http://host/foto/index.php?path=../../directory listing Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...
OneOrZero.txt
vendor: http://www.oneorzero.com/ vuln : http://host/supporter/index.php?t=tupd&id=SQL http://host/supporter/index.php?t=tupd&id=XSS Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...
koobi.txt
vendor:http://www.dream4.de dork:"powered by Koobi Pro 5.6" vuln : http://host/index.php?p=showtopic&toid=SQL http://host/index.php?p=showtopic&toid=XSS Path Disclosure:http://host/index.php?area=1&p=' Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran...
phlymail.txt
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
[SA21615] ImageMagick XCF and Sun Rasterfile Buffer Overflows
TITLE: ImageMagick XCF and Sun Rasterfile Buffer Overflows SECUNIA ADVISORY ID: SA21615 VERIFY ADVISORY: http://secunia.com/advisories/21615/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: ImageMagick 6.x http://secunia.com/product/3763/ ImageMagick 5.x...
PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS
vendor: http://www.oneorzero.com/ vuln : http://host/supporter/index.php?t=tupd&id=SQL http://host/supporter/index.php?t=tupd&id=XSS Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...
PHlyMail Lite <= 3.4.4 (folderprops.php) Remote Include Vulnerability (2)
Exploit for unknown platform in category web applications ========================================================================= PHlyMail Lite = 3.4.4 folderprops.php Remote Include Vulnerability 2 =========================================================================...
Slackware 10.0 / 10.1 / 10.2 / 9.0 / 9.1 / current : libtiff (SSA:2006-230-01)
New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. These issues could be used to crash programs linked to libtiff or possibly to execute code as the program's user. Thanks to Tavis Ormandy and the Google Security Team. %NASLMINLEVEL...
virualWar.txt
Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...
Koobi Pro CMS 5.6 SQL injection & XSS
vendor:http://www.dream4.de dork:"powered by Koobi Pro 5.6" vuln : http://host/index.php?p=showtopic&toid=SQL http://host/index.php?p=showtopic&toid=XSS Path Disclosure:http://host/index.php?area=1&p=' Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran...
otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln
vendor: http://www.jakeo.com vuln : http://host/foto/index.php?path=../../etc/passwd http://host/foto/index.php?path=bxss/b http://host/foto/index.php?path=../../directory listing Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...
Discloser <= 0.0.4 (fileloc) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ Discloser = 0.0.4 fileloc Remote File Include Vulnerabilities ================================================================ | | | discloser 0.0.4 Remote File Inclusion...
Discloser 0.0.4 - 'fileloc' Remote File Inclusion
| | | discloser 0.0.4 Remote File Inclusion Vulnerability | | Download: http://optusnet.dl.sourceforge.net/sourceforge/discloser/discloser-0.0.4.tar.gz | |Contact| | | Discoverd by: Arash RJ | | Team: PersianFox Digital Security Team | | URL: http://www.PersianFox.com | | E-Mail: [email protected]...
python -- buffer overrun in repr() for unicode strings
Benjamin C. Wiley Sittler reports: I discovered a buffer overrun in repr for unicode strings. This causes an unpatched non-debug wide UTF-32/UCS-4 build of python to abort. Ubuntu security team reports: If an application uses repr on arbitrary untrusted data, this bug could be exploited to execut...
[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:140 http://www.mandriva.com/security/ Package : ncompress Date : August 9, 2006 Affected: 2006.0, Corporate 3.0 Problem Description: Tavis Ormandy, of the Google Security Team, discovered that ncompress, whe...
Archangel Weblog 0.90.02 and prior Multiple HTML injections
HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...
blur6ex 0.3 Comment title HTML inyection vuln.
HeLiOsZ - Dark End Team - Internet Security Team blur6ex 0.3 Comment title HTML inyection vuln. IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blursoft.com Exploit: - To exploit this vuln you simply need an...