PHP-Fusion < 6.00.307 Local File Inclusion

Binary data 3560.prm...

phpListPro Multiple Script returnpath Parameter Remote File Inclusions

The remote host is running phpListPro, a website voting/ranking tool written in PHP. The installed version of phpListPro fails to sanitize user input to the 'returnpath' parameter of the 'config.php', 'editsite.php', 'addsite.php', and 'in.php' scripts before using it to include PHP code from oth...

Listserv < 14.5 Multiple Buffer Overflows

Binary data 3458.prm...

MyBB < 1.04 misc.php SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the comma variable via the 'comma' parameter in a cookie. If PHP's 'registerglobals' setting is enabled, a remote, unauthenticated attacker can...

GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...

Acunetix Web Vulnerability Scanner Detection

Binary data 3298.prm...

Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. This flaw causes a security vulnerability to exist. A specially crafted request to the HTML converter could cause the converter to fail in such a way that it could...

cybsecApps.txt

CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...

CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability

CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...

e107 0.6 forum_post.php create new topics in non-existing forums

Hello, The e107 is an open-source, PHP and SQL based portal and content management system1. The user Tron2 of my website3 has detected an issue in forumpost.php. If you want to create a new topic you will get to forumpost.php?nt.13 where an integer the id of the forum represents. Because there is...

CA BrightStor ARCserve Backup - Remote Overflow

CA BrightStor ARCserve Backup - Remote Overflow / 02/20/2005 This is provided as proof-of-concept code only for educational purposes and testing by authorized individuals with permission to do so. exploit by : cybertronic cybertronicatgmxdotnet This exploits the following vulnerabilities: Compute...

CA BrightStor ARCserve Backup Auto Scanner / Exploiter

No description provided by source. / 02/20/2005 This is provided as proof-of-concept code only for educational purposes and testing by authorized individuals with permission to do so. exploit by : cybertronic cybertronicatgmxdotnet This exploits the following vulnerabilities: Computer Associates...

Atomic Photo Album apa_phpinclude.inc.php apa_module_basedir Parameter Remote File Inclusion

Binary data 3111.prm...

YAWS < 1.56 Script File Source Code Disclosure

Binary data 3019.prm...

Outlook Web Access with Exchange 5.5 SP4 XSS

Binary data 3014.prm...

MS Windows WINS Vulnerability and OS/SP Scanner

Exploit for unknown platform in category remote exploits =============================================== MS Windows WINS Vulnerability and OS/SP Scanner =============================================== / HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------...

Microsoft Windows - WINS Vulnerability + OS/SP Scanner

/ HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------ ------------------------------------ Note: ---------------- By default, nothing printed on screen, 200 threads, all results in the file HSWINS.txt -v..: lite verbose, will print the 'NOTPATCHED' results on the screen...

Microsoft Windows - WINS Vulnerability + OSSP Scanner

Microsoft Windows - WINS Vulnerability + OSSP Scanner / HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------ ------------------------------------ Note: ---------------- By default, nothing printed on screen, 200 threads, all results in the file HSWINS.txt -v..: lite verbos...

GLSA-200504-12 : rsnapshot: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200504-12 rsnapshot: Local privilege escalation The copysymlink subroutine in rsnapshot follows symlinks when changing file ownership, instead of changing the ownership of the symlink itself. Impact : Under certain circumstances,...

[Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage

February 28, 2005 Hat-Squad Advisory: GFI L.N.S.S 5.0- Insecure Credential Storage Product: GFI Languard Network Security Scanner Vendor Url: http://gfi.com/ Version: 5.0 Vulnerability: Insecure Credential Storage Release Date: February 28, 2005 Vendor Status: Informed on 22 February 2005 Respons...