CVE-2007-4447

Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to 1 execute arbitrary code via a long game command in a replay .rpl file and 2 cause a denial of service application crash via a long SAY command that omits a required LF character; and allow remote...

PHP and ASP are two kinds of script upload vulnerability explore-exploit warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...

[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bugs: A nickname buffer-overflow B partial track buffer-overflow C NULL pointer access in internet/hidden S1/S2 servers D memcpy NULL pointer in internet/hidden S1/S2 servers Exploitation: remote,...

Through the Asp's invasion Webserver-vulnerability warning-the black bar safety net

Through the asp's invasion of the web server,steal the files to destroy the system, which solve the non-sensational... iis security issues 1. iis3/pws vulnerability I experimented, win98+pws running on ASP program, you'll be in the browser address bar within a decimal point of the ASP program wil...

Code injection

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day

Exploit for unknown platform in category remote exploits ========================================================== ViRC 2.0 JOIN Response Remote SEH Overwrite Exploit 0day ========================================================== !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwri...

Link Request Contact Form 3.4 - Remote Code Execution

-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...

Design/Logic Flaw

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

Dansie Cart Script Exploit Reported

Synopsis : This program -deliberately- allows arbitrary commands to be executed on the victim server. One of our clients, while installing and configuring the Dansie Shopping Cart, ran into difficulty integrating PGP, the shopping cart program, and our secure server setup. While trying to assist...

jsp vulnerabilities and solutions-vulnerability warning-the black bar safety net

Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...

Microsoft IIS 6.0 (/AUX/.aspx) Remote Denial of Service Exploit

No description provided by source. When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException...

PHP back door hiding technique revisited-the vulnerability of early warning-the black bar safety net

Test environment: Apache/2.0.49 Win32 PHP/4.3.1+Winxp sp2 Recently watched a program code after again to brush up on PHP Chinese manual, looking at the process, suddenly thought of a hidden back-door method, bring it to share with you Hey Hey: in the invasion of the server how can the back door d...

GLSA-200705-07 : Lighttpd: Two Denials of Service

The remote host is affected by the vulnerability described in GLSA-200705-07 Lighttpd: Two Denials of Service Robert Jakabosky discovered an infinite loop triggered by a connection abort when Lighttpd processes carriage return and line feed sequences. Marcus Rueckert discovered a NULL pointer...

tcexam-inject.txt

resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // read data from cache requireonce$this-cachefile; $this-resource = $tmx; else if !empty$this-cachefile // open cache file...

Plesk Multiple Script locale_id Parameter Traversal Arbitrary File Access

The remote host is running Plesk, a control panel used to administer and manage websites. The version of Plesk installed on the remote host fails to sanitize user-supplied input to the 'localeid' parameter of the 'login.php3', 'loginup.php', and 'top.php3' scripts before using it to access files...

FD Script 1.3.x - 'FName' Information Disclosure

source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...

WzdFTPD FTP server DoS

NULL pointer dereference on FTP commands parsing...

ftpd-ldpreload.pl.txt

FTP server GNU inetutils 1.4.2 Remote Root Exploit This program remotely exploits the most recent versions of GNU inetutils ftpd on linux systems. Requirements: 1. There MUST be a chroot'ed environment for the logged in user 2. Directory etc must be writeable by the logged in user duh! The exploi...

Sambar FTP Server远程拒绝服务漏洞

Sambar FTP Server是一款Windows系统下的FTP服务程序。 Sambar FTP Server对SIZE命令参数数据缺少充分边界检查，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交包含超长字符串的SIZE命令，可导致Sambar FTP Server崩溃，精心构建提交数据可能以应用程序进程权限执行任意指令。 Sambar Server 6.4 目前没有解决方案提供： http://www.sambar.com/ ?php Sambar FTP Server 6.4 SIZE Denial Of Service by rgod mail: retrog at...

CVE-2006-6616

index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information...