Creative Files 1.2 (kommentare.php) Remote SQL Injection Vulnerability

No description provided by source. ======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

AssetMan <= 2.4a (download_pdf.php) Remote File Disclosure Vuln

No description provided by source. +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To K!LL |...

Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service

source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions. Little is known regarding this vulnerability; this BID will b...

Adobe Acrobat/Adobe Reader信息泄露漏洞

Adobe Acrobat和Adobe Reader都是非常流行的PDF文件阅读器。 Adobe Reader或Adobe Acrobat打开恶意PDF文件时可能会启动file:// URL，这可能导致读取系统上的任意文件并发送给攻击者。 Adobe Acrobat Professional 8.0.0 Adobe Adobe Reader Professional 8.0.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com...

PHP 5.2.1 - substr_compare() Information Leak

PHP 5.2.1 - substrcompare Information Leak ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...

mina-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ $ Title : Mina Ajans Script Remote File Inclusion Vuln. $ Author : CanberX , BLaCKWHITE $ Free : NOT : $ Disb : www.minaajans.com.tr $ G. Dork : "Tasarim ve program: Mina Ajans." $ $ Vuln Code :...

Hailboards v1.2.0 &#40;phpbb_root_path&#41; Remote File Include Exploit

----------------------------------------------- Hailboards v1.2.0 phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include$phpbbrootpath . 'includes/bbcode.'.$phpEx;...

Microsoft Visual C++ - '.RC Resource Files' Local Buffer Overflow

// // // Microsoft Visual C++ 6.0 SP6 resource compiler buffer overflow // vulnerability .rc resource files exploit // // vulnerability found / exploit built by porkythepig // // include "stdio.h" include "stdlib.h" include "memory.h" define STR01 "Microsoft Visual Studio 6.0 SP6 .rc PoC exploit ...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resultin...

cwmExplorer 1.0 - show_file Source Code Disclosure

cwmExplorer 1.0 - showfile Source Code Disclosure Title : cwmExplorer 1.0 showfile Source Code Disclosure Vulnerability Author : ajann Contact : : ERROR------------------------------------------------------ .... .. $datei = "dirs/".$d."/".$GETshowfile;...

atftp.txt

!/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Canno...

phpevent-rfi.txt

Title : PHP Event Calendar 1.5.1 index.php Remote File Include Vulnerability Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : Title:...

Moskool Component Admin.Moskool.PHP远程文件包含漏洞

MamboXChange Moskool是一款基于Mambo的应用模块程序。 MamboXChange Moskool不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'admin.moskool.php'脚本对用户提交的"mosConfigabsolutepath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码 MamboXChange Moskool 1.5 http://mamboxchange.com/projects/moskool/...

phpged.txt

========================================================================================================================== PhpGedView 4.0.2 DOCUMENTROOT File inclusion Vulnerablity ======================================= Script:PhpGedView ============= Version:4.0.2 ============= script...

MattWrighttextcounter.pl远程执行命令漏洞 Exploit

No description provided by source. Doru Petrescu （[email protected]）提供了如下测试代码： -- cut here -- !/usr/bin/perl $URL='http://dtp.kappa.ro/a/test.shtml'; please DO modify this $EMAIL='[email protected],root'; please DO modify this if $ARGV0 $CMD=$ARGV0; else $CMD="ps ax;cd ..;cd ..;cd ..;cd etc;cat...

telaen110.txt

!/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hackin...

MS Windows NetpManageIPCConnect Stack Overflow Exploit (py)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetpManageIPCConnect Stack Overflow Exploit py =========================================================== !/usr/bin/python MS06-070 Windows WorkStation...

NetGear wireless driver fails to properly process certain 802.11 management frames

Overview A buffer overflow vulnerability has been reported in the Netgear WG111v2.SYS wireless driver. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or cause a denial-of-service condition. Description The WG111v2.SYS driver is a wireless 802.11...

SystemMessenger_xss.txt

------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...

IBM AIX snappd本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的snappd工具实现上存在漏洞，本地snapp组的攻击者可能利用此漏洞以root用户权限执行任意指令。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除setuid root位： chmod 550 /usr/sbin/snappd 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/snappdifix.tar.Z...