Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...

CVE-2008-0436: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web script or HTML via the target parameter...

PixelPost 1.7 - Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc3 print "-------------------------------------------------------------------------\r\n"; print " PixelPost 1.7 Blind SQL Injection...

CVE-2008-0208: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0209: Improper Input Validation

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

MS Windows Media Player 9 Plugin Overflow Exploit (MS06-006) (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

WebSihirbazi 5.1.1 (pageid) Remote SQL Injection Vulnerability

No description provided by source. ||---------------------------------------------------------------------- | Title : websihirbazi v5.1.1 Remote Blind SQL Injection Vulnerability| ||---------------------------------------------------------------------- | AUTHOR: bypas |...

php525-bypass.txt

SAFE MODE BYPASS body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR: D50428;...

MS Windows Message Queuing Service RPC BOF Exploit (MS07-065)

Exploit for unknown platform in category remote exploits ============================================================= MS Windows Message Queuing Service RPC BOF Exploit MS07-065 ============================================================= / Windows Message Queuing Service Remote RPC BOF Exploit...

FreeWebShop 2.2.7 - cookie Admin Password Grabber

FreeWebShop 2.2.7 - cookie Admin Password Grabber !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ De...

nokia-dos.txt

Nokia N95 cellphone remote DoS using the SIP Stack Severity: High – Denial of Service Hardware: Nokia N95 Firmware: Tested version: Nokia RM-159 V 12.0.013 Notification: Vulnerability found: 11 September 2007 Contact Nokia Support: 12 September 2007 / None reply Contact Nokia Security Support: 19...

Design/Logic Flaw

iSCSI Enterprise Target iscsitarget 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords...

CVE-2007-5827

iSCSI Enterprise Target iscsitarget 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords...

CVE-2007-5827

CVE-2007-5827 affects iscsitarget (iSCSI Enterprise Target) version 0.4.15, where /etc/ietd.conf is created with weak permissions. This allows local users to read passwords stored in that file, resulting in potential credential exposure. The underlying issue is improper access permissions on a cr...

CVE-2007-5827

iSCSI Enterprise Target iscsitarget 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords...

CVE-2007-5827: Undefined Security Weakness

iSCSI Enterprise Target iscsitarget 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords...

Scribe 0.2 - PHP Remote Code Execution

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Scribe...

Scribe <= 0.2 Remote PHP Code Execution Vulnerability

No description provided by source. --------------------------------------------------------------- Scribe = 0.2 Remote PHP Code Execution Download: http://sourceforge.net/projects/scribe/ --------------------------------------------------------------- By KiNgOfThEwOrLd...

CVE-2007-5692

Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...

CVE-2007-5692

Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...