|
|
Colapse all |
Post message
[SECURITY] [DSA 691-1] New abuse packages fix local root exploit 2005-03-07 joey infodrom org (Martin Schulze) Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php 2005-03-05 Some one (someone cannabismail com) In-Reply-To: <20050303055339.3109.qmail (at) www.securityfocus (dot) com [email concealed]> >phpBB 2.0.13 Bad filtered in usercp_register.php The error isn't in usercp_register.php, it is perfectly fine that the user can set these options. The Problem is the HTML filtering in privmsg.php and viewtopic.php. In privmsg.php you [ more ] [ reply ] Windows Server 2003 and XP SP2 LAND attack vulnerability 2005-03-05 Dejan Levaja (dejan levaja com) Hello, everyone. Windows Server 2003 and XP SP2 (with Windows Firewall turned off) are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condit [ more ] [ reply ] MDKSA-2005:050 - Updated gftp packages fix vulnerability 2005-03-04 Mandrakelinux Security Team (security linux-mandrake com) MDKSA-2005:052 - Updated kdegraphics packages fix vulnerabilities 2005-03-04 Mandrakelinux Security Team (security linux-mandrake com) MDKSA-2005:051 - Updated cyrus-imapd packages fix vulnerabilities 2005-03-04 Mandrakelinux Security Team (security linux-mandrake com) MDKSA-2005:049 - Updated gaim packages fix multiple vulnerabilities 2005-03-04 Mandrakelinux Security Team (security linux-mandrake com) MDKSA-2005:048 - Updated curl packages fix vulnerability 2005-03-04 Mandrakelinux Security Team (security linux-mandrake com) phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED- 2005-03-04 Wesley aka PPC (ppc respected as) Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 2005-03-04 Andrey Bayora (andrey hiddenbit org) The first part is here: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0475.html First, this post isn?t about ?how dangerous GDI+ bug or malicious JPEG image?, but ?how good? is your antivirus software. The issue is: only 1 out of 23 tested antivirus software can detect malicious J [ more ] [ reply ] [ GLSA 200503-10 ] Mozilla Firefox: Various vulnerabilities 2005-03-04 Thierry Carrez (koon gentoo org) [ GLSA 200503-08 ] OpenMotif, LessTif: New libXpm buffer overflows 2005-03-04 Thierry Carrez (koon gentoo org) -==phpBB 2.0.13 Full path disclosure==- 2005-03-04 HaCkZaTaN (hck_zatan hotmail com) /* -------------------------------------------------------- [N]eo [S]ecurity [T]eam [NST]® - Advisory #09 - 03/03/05 -------------------------------------------------------- Program: phpBB 2.0.13 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.13 & Lower versions Risk: Low Risk!! I [ more ] [ reply ] Re: TYPO3 SQL Injection vunerabilitie 2005-03-04 Karsten Dambekalns (karsten typo3 org) In-Reply-To: <20050303170830.16705.qmail (at) www.securityfocus (dot) com [email concealed]> Hi. >Two week ago I found a SQL Inejetion vulnerabilitie in Typo3 (in the links-section/module/whatever you call it). This is the first important information - this is NOT a vulnerability in TYPO3 itself, but in an extension. >I d [ more ] [ reply ] PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx) 2005-03-04 Filip Groszynski (groszynskif gmail com) Re: TYPO3 SQL Injection vunerabilitie 2005-03-04 Michael Stucki (michael typo3 org) In-Reply-To: <20050303170830.16705.qmail (at) www.securityfocus (dot) com [email concealed]> Hello Fabian, (repost because posting through GMANE appears not to work!) > Two week ago I found a SQL Inejetion vulnerabilitie in Typo3 (in the > links-section/module/whatever you call it). I didn't really try to > develope [ more ] [ reply ] Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx) 2005-03-04 Filip Groszynski (groszynskif gmail com) GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability 2005-03-04 Hongzhen Zhou (felix__zhou hotmail com) (1 replies) GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability ****** Author ****** Hongzhen Zhou ( Fortinet,inc ) { felix__zhou _at_ hotmail _dot_ com hzhou _at_ fortinet _dot_ com } ******************** vulnerable version ******************** Just tested on GIMP version 2.2 [ more ] [ reply ] Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability 2005-03-04 Frank Denis (Jedi/Sector One) (j c9x org) PHP News <= 1.2.4 - Remote File Inclusion Exploit 2005-03-03 mozako (mozako mybox it) [badroot security POC]: PHP News <= 1.2.4 - Remote File Inclusion Exploit =- Description -= A simple POC exploit for PHP News <= 1.2.4 remote file inclusion vulnerability discovered by Filip Groszynski. =- Exploit -= #!/usr/bin/python # PHP News 1.2.4 remote file inclusion exploit # Code [ more ] [ reply ] |
|
Privacy Statement |
Remote Command Execution
Script: The Includer ( www.smarterscripts.com/includer/ )
Remote Command Execution on:
Example I.: www.host-vulnerable.com/includer.cgi?|id|
Example II.: www.host-vulnerable.com/includer.cgi?template=|id|
Sorry if the bug is already posted ;)
[ more ] [ reply ]