8787 matches found
CVE-2006-5569
FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5569: Undefined Security Weakness
FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
FtpXQ Server 3.01 - MKD Command Remote Overflow Denial of Service
FtpXQ Server 3.01 - MKD Command Remote Overflow Denial of Service // source: https://www.securityfocus.com/bid/20721/info DataWizard FtpXQ Server is prone to multiple remote vulnerabilities: - A remote denial-of-service issue occurs because the application fails to perform adequate bounds checks ...
CVE-2006-5105: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the initpath parameter to admin/testing/tests/0030initsyntax.php, or 2 an unspecified parameter to admin/testing/index.php. NOTE: the...
CVE-2006-5055: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...
[eVuln] Doika guestbook 'page' XSS Vulnerability
New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...
[eVuln] Links Manager Multiple XSS and SQL Injection Vulnerabilities
New eVuln Advisory: Links Manager Multiple XSS and SQL Injection Vulnerabilities http://evuln.com/vulns/136/summary.html --------------------Summary---------------- eVuln ID: EV0136 CVE: CVE-2006-4327 CVE-2006-4328 Vendor: CloudNine Interactive Vendor's Web Site:...
Rookie no longer dish! Does not know programming can also play a personal version of the Trojan horse-vulnerability warning-the black bar safety net
Whether you like to play the Trojans?? As the domestic Big Brother“ice”it. This need not I introduced,even the idiot all know! Flirtatious babe“Guangdong University of Foreign Studies girls”! Water flowsbe afraid of the“Guangdong University of Foreign Studies Ghost”! I'm afraid I'm afraid! LAN...
Bundles of good for your pony! Free kill file of sneak-vulnerability warning-the black bar safety net
Nonsense not much said. File bundle anyway still very functional. But now N lot of antivirus software can be killing the What to do? Of course is to do afree to kill! 1, thefree to killyour Trojans, This of course to befree to killyeah, or just broken. 2, looking for an EXE file of the game or wh...
win64 (URLDownloadToFileA) download and execute 218+ bytes
Exploit for win64 platform in category shellcode ========================================================== win64 URLDownloadToFileA download and execute 218+ bytes ========================================================== ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download &...
win64 (URLDownloadToFileA) download and execute 218+ bytes
No description provided by source. ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors in the code, but this is more of an experimental source if...
ACMS vulnerability-vulnerability warning-the black bar safety net
A few days ago a friend asked me to help him dosecurity testing, his Station is ACMS information distribution system. I to the official down a set of ACMS to study. ACMS front Desk is by the back-end to generate the static page, there is no injection vulnerability. The background comes with the...
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...
QTOFileManager.txt
-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=%3Cscript%3Ealert%22Ellipsis%20Security%20Test%22%3C/script%3E&u=username&pathext=1...
atutor153-xss-sql.txt
ATutor 1.5.3 http://www.atutor.ca -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/documentation/indexlist.php?lang="alert/EllipsisSecurityTest/ --- POST http://target.xx:80/registration.php?register=Register HTTP/1.0 Accept: / Content-Type:...
CentOS 3 : tar (CESA-2006:0195)
An updated tar package that fixes a path traversal flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...
gawab.txt
Script: Gawab.com Mail Services Portal System Version: ? Language: PHP Problem: Xss Vendor: http://www.HackMaster.Us Discovered by: rootterathackmasterdotus Example:...
infocus
Hi, We have released simple and user friendly GUI FTP fuzzer tool for stress testing FTP server implementations. It is quite configurable tool, which means that you can precisely define which FTP commands will be fuzzed with the parameter size and test strings. Running this fuzzer against FTP...
SA-03.txt
I'm proud to introduce an example of return into libc exploit which works though grsecurity patch protection. Please read source carefully and change some lines cause default version probably wont work on your machine. - This is example, remember it. ; / Grsecurity bypass tryout - system"/bin/sh"...