Eve-NukePortal file include (phpbb_root_path)

=========================================================================================== Eve-NukePortal file include phpbbrootpath =========================================================================================== Script name :Eve-Nuke Portal Download script :...

PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHP-Nuke Module Eve-Nuke 0.1 mysql.php RFI Vulnerability ==========================================================...

PHP-Nuke Module Eve-Nuke 0.1 - mysql.php Remote File Inclusion

PHP-Nuke Module Eve-Nuke 0.1 - mysql.php Remote File Inclusion =========================================================================================== Eve-NukePortal file include phpbbrootpath =========================================================================================== Script...

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)

/ Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an intial version of EnumPrinter and OpenPrinter fuzzer. I hope that it will...

subscribe (pwd.txt) Remote Password Disclosur

subscribe pwd.txt Remote Password Disclosur D0rk = "Powered By PHP Subscriber" discovered by : ThE TiGeR 100 Exploit : http://www.site.com/path/pwd.txt or http://www.site.com/pwd.txt then crack the password with bass64 decode ,,the password is coded by base64 not hash Contact:[email protected]...

Linux-HA Heartbeat Insecure Default Permissions on Shared Memory Vulnerability

No description provided by source. / Intruders Tiger Team Security http://www.intruders.org.br/ Heartbeat 2.0.6 Insecure Shared Memory - Local Denial of Service. Credits: Yan Rong Ge, see link below: http://secunia.com/advisories/21162/ Tested on Heartbeat 2.0.5. Thanks for Wendel Guglielmetti,...

JAF CMS Remote file include (website)

=========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Version : 4.0...

JAF CMS <= 4.0 RC1 Multiple Remote File Include Vulnerabilities

No description provided by source. =========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Version : 4.0...

JAF CMS <= 4.0 RC1 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== JAF CMS = 4.0 RC1 Multiple Remote File Include Vulnerabilities ===============================================================...

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

=========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Version : 4.0...

[Full-disclosure] Advisory - D-Link Access Point

INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ http://www.intruders.org.br/ ADVISORY/0206 - D-Link Wireless Access-Point DWL-2100ap PRIORITY: HIGH I - INTRUDERS: ---------------- Intruders Tiger Team Security is a project entailed with Security Open Source...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

CVE-2005-1933

Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier CFBundleIdentifier, a different vulnerability than CVE-2005-1474...

CVE-2005-1933

CVE-2005-1933 affects Apple Mac OS X Tiger (10.4) Dashboard. It arises when a user widget uses the same CFBundleIdentifier as a system widget, causing Dashboard to override the legitimate widget and potentially let the attacker execute arbitrary commands. The impact is user-level code execution v...

Apple Mac OSX executes arbitrary widget with same "bundle identifier" as system widget

Overview Apple Mac OS X Tiger Dashboard executes arbitrary widgets with the same "bundle identifier" as a system widget. This can allow a user-installed widget to override a system-installed one. Description DashboardDashboard is a new feature introduced in Apple Mac OS X Tiger 10.4. Dashboard is...

Apple Safari automatically installs Dashboard widgets

Overview Apple Safari on Mac OS X Tiger automatically installs Dashboard widgets without user intervention or notice. Description DashboardDashboard is a new feature introduced in Apple Mac OS X Tiger 10.4. Dashboard is a collection of applications called "widgets." The system-installed widgets a...

CVE-1999-1038

Tiger 2.2.3 is affected by a local privilege issue where an attacker can overwrite arbitrary files via a symlink attack on temporary files in Tiger’s default working directory (WORKDIR). The root cause is a symlink vulnerability in how temporary files are handled, enabling local users to achieve ...

CVE-1999-1560

Vulnerability in a script in Texas A&M University TAMU Tiger allows local users to execute arbitrary commands as the Tiger user, usually root...

CVE-1999-1560

CVE-1999-1560 describes a local privilege escalation in TAMU Tiger where a vulnerability in a script allows local users to execute arbitrary commands as the Tiger user (usually root). The affected component is a script within TAMU Tiger; the underlying cause is not explicitly detailed in the prov...