FarsiNews 2.1 PHP Remote File Inclusion

Remote File Inclusion in FarsiNews 2.1 and below Credit: The information has been provided by Hamid Ebadi Hamid Network Security Team :[email protected]. The original article can be found at : http://hamid.ir/security Vulnerable Systems: FarsiNews 2.1 Beta 2 and below Vulnerable Code: The following...

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection

!/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die "-Connect Failed\r\n"; print "+Connecting...\n"; print $socket...

Invision Power Board Dragoran Portal Mod <= 1.3 SQL Injection Exploit

No description provided by source. !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV 3 print q IPB Portal 1.3 SQL injection Get Hash Exploit Tested on Invision Power Board 1.3....

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die...

Ubuntu 4.10 / 5.04 : postgresql vulnerabilities (USN-118-1)

It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...

Sql-инъекция и межсайтовый скриптинг в Plogger Photo Gallery

Здравствуйте, 3APA3A. свежая порция: Software: Plogger Photo Gallery = 2.1 Vendor: Plogger www.plogger.org Vulnerability: Sql-инъекция и межсайтовый скриптинг Risk: средний Date: 10.01.2006 discovered by durito -duritoatmaildotru- HTTP: all-about-all.net durito.narod.ru +:| Details |: Уязвимость...

Linux Kernel 2.6.9 2.6.11 (RHEL 4) - SYS_EPoll_Wait Local Integer Overflow Local Privilege Escalation

Linux Kernel 2.6.9 2.6.11 RHEL 4 - SYSEPollWait Local Integer Overflow Local Privilege Escalation / k-rad3.c - linux 2.6.11 and below CPL 0 kernel local exploit v3 Discovered and original exploit coded Jan 2005 by sd Modified 2005/9 by alert7 XFOCUS Security Team http://www.xfocus.org gcc -o k-ra...

Linux Kernel 2.6.9 < 2.6.11 (RHEL 4) - 'SYS_EPoll_Wait' Local Integer Overflow / Local Privilege Escalation

/ k-rad3.c - linux 2.6.11 and below CPL 0 kernel local exploit v3 Discovered and original exploit coded Jan 2005 by sd Modified 2005/9 by alert7 XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 tested succeed : on default installed RHEL42.6.9-5.EL and 2.6.9-5.ELsmp...

Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)

Exploit for linux platform in category local exploits ============================================================ Linux Kernel Modified 2005/9 by alert7 XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 tested succeed : on default installed RHEL42.6.9-5.EL and...

новые уязвимости

Здравствуйте, 3APA3A. Вот обнаружил несколько проблем в скипте perlshop.cgi version 4.4.01 и более ранних. Software: Perlshop 4.5.01 Vendor: Waverider Systems www.WaveriderSystems.com Vulnerability: раскрытие инсталяционного пути и межсайтовый скриптинг Risk: низкий Date: 19.12.2005 discovered by...

imoelPassword.txt

IMOEL CMS has the weakness to download the plain text sql password in the setting.php file / $setting'host''username' = 'sqlusername'; $setting'host''password' = 'sqlpassword'; so u can download the setting.php file & view the plain text password as the default imoel cms set the administrator use...

[SA17954] ASPMForum Two SQL Injection Vulnerabilities

TITLE: ASPMForum Two SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17954 VERIFY ADVISORY: http://secunia.com/advisories/17954/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASPMForum http://secunia.com/product/6401/ DESCRIPTION: DjEyes has reported...

winCreateExp.txt

Microsoft Windows CreateRemoteThread Exploit name : nima Salehi email : [email protected] web site : www.Ashiyane.com www.Ashiyane.net Copyright c 2002-2005 Ashiyane Digital Securty Team --------------------------------------------------------------------- Systems Affected: - Windows XP all SP -...

arc insecure temporary file creation

arc insecure temporary file creation Vendor: http://arc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/arc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. The temporary fil...

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection

mybb is dead /str0ke !/usr/bin/perl Crouz.Com Security Team EXPLOIT FOR: MyBulletinBoard Search.PHP SQL Injection Vulnerability Expl0it By: A l p h a P r o g r a m m e r sirius Email: [email protected] This Xpl Change Admin's Pass For L0gin With P0wer User HACKERS PAL & Devil-00 &...

MyBulletinBoard (MyBB) <= 1.00 RC4 SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== MyBulletinBoard MyBB mhp0rtal -- Dr-CephaleX -- The-Cephexin -- DjayAgoustinno...

Debian DSA-746-1 : phpgroupware - input validation error

A vulnerability had been identified in the xmlrpc library included with phpgroupware, a web-based application including email, calendar and other groupware functionality. This vulnerability could lead to the execution of arbitrary commands on the server running phpgroupware. The security team is...

Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)

Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...

ASPNuke <= 0.80 (article.asp) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== ASPNuke Alphaprogrammer -- oilKarchack -- theCephaleX -- Str0ke And Iranian Security & Technical Sites: IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security...