PHP/ASP/CGI web applications security bugs

PHP inclusions, SQL injections, directory traversals, crossite scripting, spam sending, etc...

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to...

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution

source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied URI input before using it to execute FTP commands on...

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution

source: https://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to utilizi...

kdelibs3 -- konqueror FTP command injection vulnerability

Albert Puigsech Galicia reports that Konqueror more specifically kioftp and Microsoft Internet Explorer are vulnerable to a FTP command injection vulnerability which can be exploited by tricking an user into clicking a specially crafted FTP URI. It is also reported by Ian Gulliver and Emanuele...

CVE-2002-1313

nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users...

Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass

source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send SMS messages from unsuspecting cellular telephone user's telephon...

RealSecure / Blackice iss_pam1.dll Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== RealSecure / Blackice isspam1.dll Remote Overflow Exploit ========================================================== / 557isspamexp - RealSecure / Blackice ICQ isspam1.dll remote...

PT-2003-2252 · Apache +2 · Apache Http Server +2

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server with mod php module affected versions not specified Description: The mod php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the...

Yahoo! Messenger buffer overflow

Buffer overflow in YMSGR:sendfile? URL on large number of ''...

DSA-386 libmailtools-perl - input validation bug

Bulletin has no description...

WihPhoto (PHP)

Informations : °°°°°°°°°°°°°° Version : 0.86-dev Website : http://www.wihsy.com problem : All files from the hard disk can be send by mail PHP Code/Location : °°°°°°°°°°°°°°°°°°° util/email.php : ------------------------------------------------------------------------ ? class CMailFile var...

UDP Stress Tester Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== UDP Stress Tester Denial of Service Exploit =========================================== include include include include include include include include include define shit "BLEAHD" timet elapsed; long...

UDP Stress Tester - Denial of Service

UDP Stress Tester - Denial of Service include include include include include include include include include define shit "BLEAHD" timet elapsed; long sendcount = 0, kbs; void statsint signum kbs = sendcount6/time0-elapsed/1024; // i dont think this is right but... printf"\npid: %d, ran for %u...

CVE-2002-0751

CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified 1 form-to, 2 form-from, and 3 form-results parameters...

wolfmail.cgi.txt

+-..-+ WolfMail.cgi +-./.-+ by Dead Beat The Advanced Knowledge Network http://www.advknowledge.net Mailirritation possibillity fake and highfire an account Wolfmail is a script similar to formmail.cgi which allows users to send mails from the page without using their Mailclient. However I guess...

Special DOS-device access in Microsoft Outlook Express

It's possible to hang Outlooks Express by using prn: device as a name for bgsound or iframe. It's also possible to send data to special device...

Маленькая дырка в formmail

Атакующий может просмотреть переменные окружения на сервере. Кроме того, возможна безнаказанная рассылка спама...

efax

Didn't see this mentioned before... hdm@sliver: which efax /opt/kde2/bin/efax hdm@sliver: ls -la /opt/kde2/bin/efax -rwsr-xr-x 1 root root 96689 Aug 16 10:23 /opt/kde2/bin/efax hdm@sliver: efax -h efax: Tue Jan 15 18:43:28 2002 efax v 0.9a-001114 Copyright 1999 Ed Casas efax: Tue Jan 15 18:43:28...

Microsoft Windows 2000 SMTP service fails to properly authenticate credentials of unauthorized user (MS01-037)

Overview A vulnerability exists in the SMTP service installed by default on Microsoft Windows 2000 Server and optionally on Windows 2000 professional that could allow an intruder to use the service to send mail. Description The Simple Mail Transfer Protocol SMTP is the standard protocol used to...