6245 matches found
weboddity-traverse.txt
Web Oddity Web Server 0.09b Directory Transversal Vulnerability Found by: Katatafish [email protected] Download: http://sourceforge.net/project/showfiles.php?groupid=13854 Thanks: str0ke use LWP::Simple; use strict; sub usage print "----------------------------------------------------- -...
CVE-2007-4665
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...
CVE-2007-4665
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...
PHP and ASP are two kinds of script upload vulnerability explore-exploit warning-the black bar safety net
1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...
CVE-2007-4447
Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to 1 execute arbitrary code via a long game command in a replay .rpl file and 2 cause a denial of service application crash via a long SAY command that omits a required LF character; and allow remote...
[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10
Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bugs: A nickname buffer-overflow B partial track buffer-overflow C NULL pointer access in internet/hidden S1/S2 servers D memcpy NULL pointer in internet/hidden S1/S2 servers Exploitation: remote,...
Through the Asp's invasion Webserver-vulnerability warning-the black bar safety net
Through the asp's invasion of the web server,steal the files to destroy the system, which solve the non-sensational... iis security issues 1. iis3/pws vulnerability I experimented, win98+pws running on ASP program, you'll be in the browser address bar within a decimal point of the ASP program wil...
Code injection
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...
ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day
Exploit for unknown platform in category remote exploits ========================================================== ViRC 2.0 JOIN Response Remote SEH Overwrite Exploit 0day ========================================================== !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwri...
Link Request Contact Form 3.4 - Remote Code Execution
-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...
Design/Logic Flaw
Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...
Dansie Cart Script Exploit Reported
Synopsis : This program -deliberately- allows arbitrary commands to be executed on the victim server. One of our clients, while installing and configuring the Dansie Shopping Cart, ran into difficulty integrating PGP, the shopping cart program, and our secure server setup. While trying to assist...
jsp vulnerabilities and solutions-vulnerability warning-the black bar safety net
Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...
Microsoft IIS 6.0 (/AUX/.aspx) Remote Denial of Service Exploit
No description provided by source. When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException...
PHP back door hiding technique revisited-the vulnerability of early warning-the black bar safety net
Test environment: Apache/2.0.49 Win32 PHP/4.3.1+Winxp sp2 Recently watched a program code after again to brush up on PHP Chinese manual, looking at the process, suddenly thought of a hidden back-door method, bring it to share with you Hey Hey: in the invasion of the server how can the back door d...
GLSA-200705-07 : Lighttpd: Two Denials of Service
The remote host is affected by the vulnerability described in GLSA-200705-07 Lighttpd: Two Denials of Service Robert Jakabosky discovered an infinite loop triggered by a connection abort when Lighttpd processes carriage return and line feed sequences. Marcus Rueckert discovered a NULL pointer...
tcexam-inject.txt
resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // read data from cache requireonce$this-cachefile; $this-resource = $tmx; else if !empty$this-cachefile // open cache file...
Plesk Multiple Script locale_id Parameter Traversal Arbitrary File Access
The remote host is running Plesk, a control panel used to administer and manage websites. The version of Plesk installed on the remote host fails to sanitize user-supplied input to the 'localeid' parameter of the 'login.php3', 'loginup.php', and 'top.php3' scripts before using it to access files...
FD Script 1.3.x - 'FName' Information Disclosure
source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...