Design/Logic Flaw

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...

CVE-2007-5473

The CVE-2007-5473 entry concerns Mono before 1.2.5.2. StaticFileHandler.cs in System.Web on Windows fails to properly handle a request trailing with a space or dot in XSP, allowing remote attackers to disclose source code of sensitive files. Affected component: Mono’s System.Web.StaticFileHandler...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...

openSUSE 10 Security Update : mono-core (mono-core-2392)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2392...

eXtremail <= 2.1.1 memmove() Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ============================================================= eXtremail eXtremail 1,50 $maxlen = intrand50 + 1; 0, $maxlen 0.75 - 0, $maxlen 0x75 - 1 $pad1len = intrand$maxlen 0.75; 0, $maxlen - $pad1len/2 - 1, $maxlen - $pad1len/2 $pad2len =...

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow / extremail-v6.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 2048 define BBUFSIZE BUFSIZE/34+1 define NOP 0x41 define AUTHCMD "1 AUTHENTICATE PLAIN\n" define DEFPORT 143 define PORTIMAPD DEFPORT...

CVE-2007-5431

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

php524ioncube-bypass.txt

ionCube output:"; echo $MyBootioncube; ?...

PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass

Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...

PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass

ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

PHP 5.2.4 ionCube - ioncube_read_file Safe Mode Disable Functions Bypass

PHP 5.2.4 ionCube - ioncubereadfile Safe Mode Disable Functions Bypass ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

Directory Image Gallery XSS vuln.

Sunday, 7 October 2007 Directory Image Gallery XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://splitside.net/store/index.php?mainpage=productinfo&productsid=1 affected versions:Directory Image Gallery 1.1 other versions also can be affected. Directory Image Gallery contains...

Wikepage XSS vuln

Sunday, 7 October 2007 Wikepage XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.wikepage.org/ affected versions:Wikepage Opus 13 2007.2 other versions also can be affected. Wikepage contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

Apple Safari / iPhone crossite access

Script can access source code of the page from different domain...

dbList XSS vuln.

dbList XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.livio.net/main/scripts.asp?fileid=24 affected versions:dbList v8.1 other versions also can be affected. dbList contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

SkaDate Online 5.06.0 - Remote File Disclosure

SkaDate Online 5.06.0 - Remote File Disclosure SkaDate Online Dating Software Remote File Disclosure Vulnerability Author : SnIpEr-SA.CoM tested verson : 5.0 & 6.0 Homepage : http://www.skadate.com Price: 795.00 Exp : http://www.site.com/member/featuredlist.php?viewmode=../../../../file%00...

SkaDate Online 5.0/6.0 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =========================================================== SkaDate Online 5.0/6.0 Remote File Disclosure Vulnerability =========================================================== SkaDate Online Dating Software Remote File Disclosure...

SkaDate Online 5.0/6.0 - Remote File Disclosure

SkaDate Online Dating Software Remote File Disclosure Vulnerability Author : SnIpEr-SA.CoM tested verson : 5.0 & 6.0 Homepage : http://www.skadate.com Price: 795.00 Exp : http://www.site.com/member/featuredlist.php?viewmode=../../../../file%00...

mxbb233-rfi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...

waraxe-2007-SA054.txt

waraxe-2007-SA054 - Local File Inclusion in Dance Music module for phpNuke ============================================================================ Author: Janek Vind "waraxe" Date: 25. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-54.html Target software...