----------------------------------------------------------------
[#] Security Advisory
[^] http://securitynews.ir/

[>] Advisory Title: TikiWiki Sql injection & XSS Vulnerabilities
[@] Author : bug [@] securitynews.ir
[$] Product Vendor : http://tikiwiki.org/
[.] Affected Versions : 1.9.3.2 (and may

[ more ]  [ reply ]

Microsoft Kernel Object Manager is prone to a deadlock vulnerability
which could be exploitable, making unkillable any desired process
running on the affected machine.

+ Paper/Advisory -Reversing mrxsmb.sys, Chapter II "NtClose DeadLock" -
(pdf)
+ Exploit Code (c source code)

Both two can be down

[ more ]  [ reply ]

#!/usr/bin/php -q -d short_open_tag=on

<?

echo "blur6ex <= 0.3.462 'ID' blind SQL injection / admin credentials disclosure\r\n";

echo "by rgod rgod (at) autistici (dot) org [email concealed]\r\n";

echo "site: http://retrogod.altervista.org\r\n";

echo "dork: \"powered by blur6ex\"\r\n\r\n";

/*

works regardless of php.ini

[ more ]  [ reply ]

#########################################################
# /\/\!|_|_! |-|4|23|<47 #
#########################################################

# Milli-Harekat Advisory ( www.milli-harekat.o

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/cms/print.ph

[ more ]  [ reply ]

Microsoft Server Message Block Redirector Driver (mrxsmb.sys)does not
verify user-mode buffer properly, allowing to any user to overwrite any
desired memory address. The successful exploitation results in Ring0
code execution.

+ Paper/Advisory: -Reversing mrxsmb.sys. Chapter I "Getting Ring0"-(pd

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Advisory: Chipmailer <= 1.09 Multiple Vulnerabilities

Release Date: 2006/06/13

Last Modified: 2006/06/13

Author: Tamriel [tamriel at gmx dot net]

Application: Chipmailer <= 1.09

Risk: Medium

Vendor Status: no patch avail

[ more ]  [ reply ]

Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow

iDefense Security Advisory 06.13.06
http://www.idefense.com/application/poi/display?type=vulnerabilities
June 13, 2006

I. BACKGROUND

Windows Media Player is a video and audio file player for Windows based
systems. It supports mul

[ more ]  [ reply ]

# if ($path){
# $ips = file("$path/lists/bannedips.php");
# } else {
# $ips = file("lists/bannedips.php");
# }
# if (in_array($REMOTE_ADDR,$ips)) {
# echo($bannedmessage);
# die;

There might be a terminology problem here.

I don't see how this can be used to execute code. Yes, the file()
call cou

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities

# Risk : High

# Class: Remote

# Script : Ltwcalendar

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# require_once('./private/ltw_config.php');

[ more ]  [ reply ]

Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS

iDefense Security Advisory 06.13.06
http://www.idefense.com/application/poi/display?type=vulnerabilities
June 13, 2006

I. BACKGROUND

Microsoft Windows Operating System is system software for Intel based
PCs. More information can be found at t

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# S H O U T B O X (v1.5) Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : S H O U T B O X

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# $this_dir = str_replace('\\', '

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities

# Risk : High

# Class: Remote

# Script : Amr Talkbox

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# if ($lang == "eng") {

# include ("$direct

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# PHP MESSENGER 1.0 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : PHP MESSENGER

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# require ($path_to_php_messenger_script);

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Jobline 1 1 1 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : Jobline

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# if ( file_exists( "$mosConfig_absolute_path/compo

[ more ]  [ reply ]

Microsoft Internet Explorer ART File Heap Corruption Vulnerability

iDefense Security Advisory 06.13.06
http://www.idefense.com/application/poi/display?type=vulnerabilities
June 13, 2006

I. BACKGROUND

Internet Explorer is the web browser included in Microsoft Corp.'s
Windows products.

II. DESCRIP

[ more ]  [ reply ]

ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-06-017.html
June 13, 2006

-- CVE ID:
CVE-2006-2382

-- Affected Vendor:
Microsoft

-- Affected Products:
Internet Explorer 6 All Versions
Internet Explorer 5 SP4

-- T

[ more ]  [ reply ]

Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow

iDefense Security Advisory 06.13.06
http://www.idefense.com/application/poi/display?type=vulnerabilities
June 13, 2006

I. BACKGROUND

Microsoft Windows Operating System is system software for Intel based
PCs. More information can be found

[ more ]  [ reply ]

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability
in the Microsoft Windows Remote Access Connection Manager (RASMAN) service
which (under certain versions of the OS) can allow a remote, anonymous
attacker to gain complete control over a vulnerable system.

The vulnerability

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Shoutpro 1.0 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : Shoutpro

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# include("config.php");

# include("functions.php");

[ more ]  [ reply ]

multiple Xss exploits in 35mmslidegallery V6

forum type : 35mmslidegallery V6
bug found by : black-code
team : $!T3-D0WN
type : Xss

####################################################
exploits :

http://example.com/lumet/album/index.php?imgdir='><script>alert(10)</scr
ipt>

http://example.comr/lum

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Symantec Vulnerability Research

http://www.symantec.com/research

Security Advisory

Advisory ID : SYMSA-2006-004

Advisory Title: Vulnerability in Graphics Rendering Engine Co

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/language.php

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1096-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
June 13th, 2006

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/subject.php?

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/meaning.php?

[ more ]  [ reply ]

=============================================

Discovered By: CrAzY CrAcKeR

Site:www.alshmokh.com

I want to thank my friend:-

nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r

Breeeeh-BoNy_m-Rootshill-LiNuX_rOOt-SauDiVirUs

=============================================

Example:-

/show.php?Use

[ more ]  [ reply ]

# SaVSaK.CoM | SpC-x - The-BeKiR |

# Simpnews <= All version - Remote File Include Vulnerabilities

# Risk : High

# Class: Remote

# Script : Simpnews

# Credits : SpC-x - The-BeKiR

# Thanks : Ejder - FasTBoY - ERNE - RMx

# Code :

# require_once($path_simpnews.'/langchk.php');

[ more ]  [ reply ]