7505 matches found
Minishowcase 09b136 (lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= Minishowcase 09b136 lang Local File Inclusion Vulnerability ============================================================= Digital Security Research Group DSecRG Advisory...
DSECRG-08-033.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...
PixelPost 1.7.1 - language_full Local File Inclusion
PixelPost 1.7.1 - languagefull Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008...
Dokeos E-Learning System 1.8.5 - Local File Inclusion
Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date of Public Advisory: 17.07.2008...
DSEGRG-08-31.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...
debopenssh-auth.txt
/ Debian maybe other derivates |KUDUBUTUNTU| OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation Fedora/RHEL Linux should be tested because it MAY contain the same vulnerability in it's OpenSSH patches in a time slice. Latest OpenSSH should not be vulnerable. Older Debian Releases may. O...
MS Internet Explorer COM Objects File Download Exploit (MS05-038)
No description provided by source. /+++++++++++++++++++++++++++++++++++++++++++++++ Ms05 038 exploit POC Write By ZwelL 2005 8 11 http://www.donews.net/zwell [email protected] Some code belongs to Lioncnhonker, regards to him. This code tested on Windows 2003...
Linux Kernel "do_mremap" Local Proof of Concept II
No description provided by source. / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by Christophe Devine and Julien Tinnes posted on Bugtraq mailing list on 5 Jan 2004 but it's safer since it avoids any kernel data corruption. The following test was done...
Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 (2008-6439)
Tue Jul 8 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Only apply hotspot security patch of jitarches. - Wed Jul 2 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Added OpenJDK security patches. - Sat Jun 7 2008 Tom 'spot' Callaway - 1:1.6.0-0.16.b09 - enable sparc/sparc64 builds - Sat May 31 2008 Thomas...
Phpcms 2 0 0 7 remote file inclusion vulnerability-vulnerability warning-the black bar safety net
zzPhpcms 2 0 0 7 remote file include vulnerability url:http://www. wolvez. org/forum/redirect. php? tid=1 8 2&goto=lastpost This vulnerability is a more common variable coverage holes, where the transfer is due to the discovery of this vulnerability if it is a white box that you want to have a...
[SECURITY] Fedora 8 Update: sipp-3.1-2.fc8
SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...
Multiple Vendors Malicious SVG File Denial of Service PoC
No description provided by source. """ Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's "browse for file, preview" object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape on linux: unaffected...
Citadel/UX Remote Denial of Service Exploit (PoC)
No description provided by source. / citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi [email protected] No System Group - http://www.nosystem.com.ar / include stdio.h include stdlib.h include unistd.h include errno.h include string....
Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...
pooya-sql.txt
www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...
BBSXP the latest vulnerability and the discovery process-vulnerability warning-the black bar safety net
Operating environment: Micromedia Dreamweaver 8.0+IIS 5.0+SQL Server 2 0 0 0+BBSXP 6.00 SP1 SQL Travel back to the days of work relatively easily, just as everyone presented a few days ago found BBSXP new vulnerability, the way to find the ASP program vulnerability method. See here you should thi...
Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections
Pooya Site Builder PSB 6.0 - Multiple SQL Injections www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory:...
Yuhhu 2008 SuperStar (board) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Yuhhu 2008 SuperStar board Remote SQL Injection Exploit ========================================================= ."; $bul=pregmatch$ara,$tuttum,$rmx;...
MySQL 4.1/5.0 zero-length password Auth. Bypass Exploit
No description provided by source. !/usr/bin/perl The script connects to MySQL and attempts to log in using a zero-length password Based on the vuln found by NGSSecurity The following Perl script can be used to test your version of MySQL. It will display the login packet sent to the server and it...
