NSAG-201-24.02.2006.txt

Advisory: NSAG-¹201-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 POP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...

чтение произвольного файла в ODFaq 2.1.0

Программа: ODFaq 2.1.0 http://www.oodie.com/project/odfaq/ Описание: в интерактивной системе ODFaq 2.1.0 существует возможность обхода ограничения на чтение файлов с сервера. В файле config.inc.php в ассоциативном массиве $PAGE прописаны все страницы, доступные для выполнения через параметр P в...

CVE-2006-0223

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

Ubuntu 4.10 : php4 vulnerabilities (USN-40-1)

Stefan Esser reported several buffer overflows in PHP's variable unserializing handling. These could allow an attacker to execute arbitrary code on the server with the PHP interpreter's privileges by sending specially crafted input strings form data, cookie values, and similar. Additionally, Ilia...

Using the WebShell to achieve DDOS attack-vulnerability warning-the black bar safety net

Believe some black friends haven't playedDDOSit, whether WebShell lot, you know WebShell also able to achieve a DDdos? Know the big scare, don't watch, this is the rookie tutorial lonely sword Saint not a hacker master, can only write newbie tutorials! in. First you the WebShell to be uploaded fi...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

MilliScripts14.txt

Full PDF Advisory: http://securitynation.com/files/sndown.php?id=22 english http://securitynation.com/files/sndown.php?id=22 spanish Multiple Bugs On MilliScripts 1.4 Redirection http://www.milliscripts.at Date: 01-Diciembre-2005 Researchers: Luis Alberto Cortes Zavala, Vicente Perez 1.-Overview...

IIS alternative Backdoor-vulnerability warning-the black bar safety net

Finally by the school into the society, found that in fact the school still has much to our nostalgia of the place, and the work is actually quite hard, most Main is Can't often and friends together to play online. On Saturday, back to the trip to the school, in the host room and do network chat...

Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net

Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...

Enter a server after hide their own means-vulnerability warning-the black bar safety net

I like hiding, it summed up some of the hidden programme, specifically to look at the situation. Then the General into a server after hide their own means: To 1. superdoor clone, but there is a bug. Banyan brother. ca clone, to rely on the ipc, it is not very cool 2。 Create count$such hidden...

CVE-2005-3163

Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root...

NOVL-2005010098073 GroupWise Password Caching

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10098073 Title: GroupWise Password Caching Date: 16-August-2005 Revision: Original Product Name: GroupWise 5.x, 6.x OS/Platforms:...

CVE-2005-2614

CVE-2005-2614 affects Discuz!

CVE-2002-2114

Artekopia Netjuke before 1.0 b7 is affected by a remote-code-execution vulnerability. The issue arises when the section parameter is passed to an eval call, enabling an attacker to run arbitrary code on the web server. The connected documents confirm the affected product/version and the root caus...

Generic Botnet Server Detection (harvest) (deprecated)

Binary data 3147.prm...

Generic Botnet Server Detection (ftp) (deprecated)

Binary data 3142.prm...

Generic Botnet Server Detection (ddos) (deprecated)

Binary data 3135.prm...

WordPress Core 1.5.1.2 - 'xmlrpc' Interface SQL Injection

!/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML RPC server vulnerabilities I discovered to extract a...

K-COLLECT CSV_DB.CGI 1.0/i_DB.CGI 1.0 - Remote Command Execution

// source: https://www.securityfocus.com/bid/14059/info CSVDB.CGI/iDB.CGI are affected by a remote command execution vulnerability. Specifically, an attacker can supply arbitrary commands prefixed with the '|' character through the 'csvdb.cgi' script that will be executed in the context of the We...

fusionBB.txt

GulfTech Security Research June 6th, 2005 Vendor : InteractivePHP, Inc URL : http://www.fusionbb.com/ Version : Version .11 Beta And Earlier Risk : Multiple Vulnerabilities Description: FusionBB is a popular online message board written in php and developed by InteractivePHP, INC. There are sever...