what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 69 of 69

Files Date: 2006-09-14 to 2006-09-15

netapi_win2003.pm.txt

Posted Sep 14, 2006

Authored by Trirat Puttaraksa | Site sf-freedom.blogspot.com

This Metasploit module exploits the MS Windows NetplsRemote() remote overflow as described in MS06-040. This particular exploit is for Windows Server 2003 SP0.

tags | exploit, remote, overflow

systems | windows

SHA-256 | 4ab90d9466872b753bf451bf3a0216a6b72372d9a4668ba98f4728320c67314e

Download | Favorite | View

raptor_xkb.c

Posted Sep 14, 2006

Authored by Marco Ivaldi

X11R6 versions 6.4 and below XKEYBOARD local buffer overflow exploit for Solaris on Sparc.

tags | exploit, overflow, local

systems | solaris

SHA-256 | c2b1bf576267c476946a40ae73c3f1ddc2d7a2211f2ff67c23fc4653239b466a

Download | Favorite | View

quicksilver.txt

Posted Sep 14, 2006

Authored by mdx

Quicksilver Forums versions 1.2.1 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion

SHA-256 | 382048595209a2ef883f9547fcaa032468760426fa66f711627dbad4fc8be44e

Download | Favorite | View

phpunity.txt

Posted Sep 14, 2006

Authored by Rivertam

phpunity.postcard suffers from a remote file inclusion vulnerability in gallery_path.

tags | exploit, remote, file inclusion

SHA-256 | 700a972a3176ae5e56b480102c0241692b7fb09f415c502499f7e49051b0c1ce

Download | Favorite | View

downstat18.txt

Posted Sep 14, 2006

Authored by SilenZ

Downstat versions 1.8 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion

SHA-256 | c8952b40a570f16e6e3db05b661b52622826c85a7e1c99d9b0f2a4456f432683

Download | Favorite | View

shadowed.txt

Posted Sep 14, 2006

Authored by mad_hacker

Shadowed Portal versions 5.599 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion

SHA-256 | 9e7c06065df3ed99d938a9cd874a105aed700ab05e7f718ef998ee5b2fd99f19

Download | Favorite | View

tualblog10.txt

Posted Sep 14, 2006

Site biyosecurity.org

TualBLOG version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 6a297f57b82afb4f82b7b2f825c3ec18e73ccfdb97f2c5f1b3228796564cb64b

Download | Favorite | View

magicnewspro.txt

Posted Sep 14, 2006

Authored by Saudi Hackrz

Magic News Pro versions 1.0.3 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion

SHA-256 | 1e18637e554e70d7c81ba4e01d9f01c0707cada1602c27a6a4d47be70ddb3201

Download | Favorite | View

CiscoVTP.txt

Posted Sep 14, 2006

Authored by FX | Site phenoelit.de

Phenoelit Advisory - Cisco Systems IOS contains bugs when handling the VLAN Trunking Protocol (VTP). Specially crafted packets may cause denial of service conditions, confusion of the network operator and a heap overflow with the possibility for arbitrary code execution.

tags | advisory, denial of service, overflow, arbitrary, code execution, protocol

systems | cisco

SHA-256 | 55835c4dae9bb73bab54d974b898751b7ff9355f4016fc955f35996e0c7aed9f

Download | Favorite | View

Debian Linux Security Advisory 1161-2

Posted Sep 14, 2006

Authored by Debian | Site debian.org

Debian Security Advisory 1161-2 - The latest security updates of Mozilla Firefox introduced a regression that led to a disfunctional attachment panel which warrants a correction to fix this issue.

tags | advisory

systems | linux, debian

advisories | CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-3811

SHA-256 | 8c9dc7b2f006b5ecaf8c8dcf66017ff23962e6fd9d678a5aeda35d369ec7cc03

Download | Favorite | View

Ubuntu Security Notice 345-1

Posted Sep 14, 2006

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-345-1 - Steve Alexander discovered that mailman did not properly handle attachments with special filenames. A remote user could exploit that to stop mail delivery until the server administrator manually cleaned these posts. Various cross site scripting vulnerabilities have been reported by Barry Warsaw. By using specially crafted email addresses, names, and similar arbitrary user-defined strings, a remote attacker could exploit this to run web script code in the list administrator's web browser. URLs logged to the error log file are now checked for invalid characters. Before, specially crafted URLs could inject arbitrary messages into the log.

tags | advisory, remote, web, arbitrary, vulnerability, xss

systems | linux, ubuntu

advisories | CVE-2006-2941, CVE-2006-3636

SHA-256 | 4412d807622aa1fd4234104c400d33c940edf899555c63f5f50c13c05152f86a

Download | Favorite | View

netperformer.txt

Posted Sep 14, 2006

Authored by Arif Jatmoko

The NetPerformer Frame Relay Access Device (FRAD) suffers from multiple denial of service vulnerabilities including a buffer overflow in telnetd.

tags | exploit, denial of service, overflow, vulnerability

SHA-256 | 7c70c195bf96759e431f61bac01420be826cf46eb84f569059801ef8f3707857

Download | Favorite | View

os2a_1007.txt

Posted Sep 14, 2006

Authored by NR Nandini

Multiple cross site scripting vulnerabilities have been identified in SoftComplex Inc.'s PHP Event Calendar version 1.5.1. Prior versions may also be susceptible.

tags | exploit, php, vulnerability, xss

SHA-256 | fa612026fe79ef3bb592170199626740daa97b46923fceb0bd732b41be574efd

Download | Favorite | View

forumjbc4.txt

Posted Sep 14, 2006

Authored by ThE__LeO

ForumJBC version 4 suffers from a cross site scripting flaw.

tags | exploit, xss

SHA-256 | 38cc525490f4600bbc3eaed1c72b38e45020e5cbf3221b7de9a86c823475df72

Download | Favorite | View

EV0138.txt

Posted Sep 14, 2006

Authored by Aliaksandr Hartsuyeu | Site evuln.com

NX5Linkx version 1.0 suffers from arbitrary file disclosure, multiple SQL injection, and HTTP response splitting vulnerabilities.

tags | exploit, web, arbitrary, vulnerability, sql injection

advisories | CVE-2006-4503, CVE-2006-4504, CVE-2006-4505

SHA-256 | 767ede366b554aeb6bf350b179f671e5cd739145acf7762bd05061614695ac0b

Download | Favorite | View

EV0137.txt

Posted Sep 14, 2006

Authored by Aliaksandr Hartsuyeu | Site evuln.com

CJ Tag Board version 3.0 suffers from a cross site scripting flaw.

tags | exploit, xss

SHA-256 | 2905ba195684193ff7e97f9a8b24a43f1b48e497116f38957891654bb31f03d3

Download | Favorite | View

EV0136.txt

Posted Sep 14, 2006

Authored by Aliaksandr Hartsuyeu | Site evuln.com

Links Manager version 2006-06-12 suffers from SQL injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

advisories | CVE-2006-4327, CVE-2006-4328

SHA-256 | 677df6dd24965ee16f18ad7f7462b2fa5d9cd50c627f6a4bad4181314e7e0e86

Download | Favorite | View

EV0135.txt

Posted Sep 14, 2006

Authored by Aliaksandr Hartsuyeu | Site evuln.com

indexcity version 1.0 suffers from SQL injection and cross site scripting flaws.

tags | exploit, xss, sql injection

advisories | CVE-2006-4323, CVE-2006-4324

SHA-256 | 17ae392e1f15f7267a0453ba7645b3c61bba0a51cd503303bd13d94b45287800

Download | Favorite | View

EV0134.txt

Posted Sep 14, 2006

Authored by Aliaksandr Hartsuyeu | Site evuln.com

Doika guestbook version 2.5 suffers from a cross site scripting flaw.

tags | exploit, xss

advisories | CVE-2006-4325

SHA-256 | c1521dc13d79d8b91f21b61420048d02bb9e8b74ba6f8cbfb2c00def5b6283b4

Download | Favorite | View