atmail-disclose.txt

!/usr/bin/perl LEGAL: Permission is granted to freely reproduce this document in its entirety under the condition that the contents are not altered in any way. milw0rm IS permitted to add their standard footer: // milw0rm.com / date Permission to view or reproduce this file is NOT granted to any...

Unfixed XSS vulnerability at www.kome-world.com

Security researcher xylitol, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.kome-world.com, which at the time of submission ranked 251088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/07/2008. It is...

Unfixed XSS vulnerability at www.myworldhardware.com

Security researcher xylitol, has submitted on 18/07/2008 a cross-site-scripting XSS vulnerability affecting www.myworldhardware.com, which at the time of submission ranked 4349824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/07/2008. It i...

Maian Scripts Cookie Manipulation Authentication Bypass

The remote host is running at least one PHP application from Maian Script World that allows a remote attacker to bypass authentication and access the admin control panel by simply setting a special cookie. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2008-3168

The CVE-2008-3168 entry concerns Empire Server before version 4.3.15, where the files utility discloses the world creation time. This timing leak reduces entropy for the PRNG seed and is described as a vulnerability in the NVD entry; no exploit details are provided in the connected documents. The...

CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

WeFi information leak

Log files are stored in world-readable folder...

Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...

S.T.A.L.K.E.R多个远程溢出和拒绝服务漏洞

BUGTRAQ ID: 29997 S.T.A.L.K.E.R.是由GSC Game World开发的第一人称射击游戏。 如果远程攻击者向S.T.A.L.K.E.R.游戏服务器发送了恶意报文的话，就可以触发缓冲区溢出或拒绝服务漏洞。 ---------------------------------------- A IPureServer::Recieve栈溢出 ----------------------------------------...

Window of the world browser such as local xss cross-domain vulnerability POC-vulnerability warning-the black bar safety net

Vulnerability description: http://www.80sec.com/360-sec-browser-localzone-xss. html Document source:http://www. 80sec. com/release/The-world-browser-locale-zone-xss-POC.txt Vulnerability analysis: the window of the world browser in the start page is res://E:\PROGRA1\THEWOR1.0\LANGUAGES\CHS.DLL...

World in Conflict空指针引用拒绝服务漏洞

BUGTRAQ ID: 29888 World in Conflict是Massive娱乐公司开发的一款RTS即时战略游戏。 World in Conflict处理畸形的请求数据时存在漏洞，如果远程攻击者向WIC服务器的主TCP游戏端口（默认48000）发送了0字节数据块的话，就会触发空指针引用，导致服务器崩溃。 Massive Entertainment World in Conflict = 1.008 Massive Entertainment --------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

NULL pointer in World in Conflict 1.008

Luigi Auriemma Application: World in Conflict http://www.worldinconflict.com Versions: = 1.008 Platforms: Windows Bug: NULL pointer Exploitation: remote, versus server Date: 22 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

World in Conflict 1.008 - Null Pointer Remote Denial of Service

World in Conflict 1.008 - Null Pointer Remote Denial of Service source: https://www.securityfocus.com/bid/29888/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash...

World in Conflict 1.008 - Null Pointer Remote Denial of Service

source: https://www.securityfocus.com/bid/29888/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash the affected application, denying service to legitimate users...

Denial of Service in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 15 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

battleblog-sql.txt

++ | hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN | | hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN | | hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN | | hhh hhh aa aa cc kk k E RR R TT NN NNN | | hhh hhh aa aa ccccccc kk k EEEEEEE RR R TT NN NN | | | ++ + Script Nam...

Cross-site scripting vulnerability in multiple Tor World CGI scripts

Overview Multiple Tor World CGI scripts contain a cross-site scripting vulnerability. Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a cross-site scripting vulnerability. Impact An arbitrary script can be...

bind: /etc/rndc.key has 644 permissions by default

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named...

Directory traversal

Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter...

CVE-2008-1755

Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter...