Showing 1 - 6 of 6

Files from Hamid Network Security Team

TUGZip.txt: Posted Apr 12, 2006; Authored by Hamid Network Security Team | Site hamid.ir; TUGZip 3.4.0.0, TUGZip 3.3.0.0, and TUGZip 3.1.0.2 do not properly sanitize archives, making it possible to overwrite arbitrary files using a directory transversal attack.; tags | advisory, arbitrary; SHA-256 | f0e5a68bc738ff61005a14d4347611b5d57d55d11ca02261473863935152eaea; Download | Favorite | View

WinHKI1.6x.txt: Posted Mar 23, 2006; Authored by Hamid Network Security Team | Site hamid.ir; WinHKI 1.6x Archive Extraction Directory traversal: Due to an input validation error when extracting files compressed with certain formats, it is possible to have files extracted to arbitrary locations on the filesystem.; tags | advisory, arbitrary; SHA-256 | acbbfa4624f22737b64996b5e1a76b98c6f58d897fb2102c680182f1b5d35763; Download | Favorite | View

cutenews1.4.1.txt: Posted Mar 23, 2006; Authored by Hamid Network Security Team | Site hamid.ir; cutenews 1.4.1 allows any user to access arbitrary files due to lack of sanitization of the "archive" parameter.; tags | advisory, arbitrary; SHA-256 | 580b43b3832494e683fa4077eddfe17d7a2d38bf9778028fe8bed5571bda0330; Download | Favorite | View

RUNCMS1.3a-sql.tyxt: Posted Feb 20, 2006; Authored by Hamid Network Security Team | Site runcms.org; RUNCMS version 1.3a is vulnerable to SQL injection due to improper user input sanitization. POC included.; tags | exploit, sql injection; SHA-256 | 14e347c720be0a14ec4ca360bd0bd757032c17d4c6cd0582b2fb62fc3c809842; Download | Favorite | View

PluggedOut-1.9.9c.txt: Posted Feb 6, 2006; Authored by Hamid Network Security Team | Site hamid.ir; PluggedOut Blog Version: 1.9.9c suffers from SQL injection and XSS.; tags | exploit, sql injection; SHA-256 | 25937ae86e7d7e80c538b620b736df77860827f1e3cbf06832246e21b9c62edf; Download | Favorite | View

Acidcat-bypass.txt: Posted Dec 28, 2005; Authored by Hamid Network Security Team | Site hamid.ir; Several vulnerabilities in Acidcat CMS v 2.1.13 and below have been found which can be used to discover the admin credentials or download the database.; tags | exploit, vulnerability, bypass; SHA-256 | 472c98fc023f7527ac3a42041c418860089f96762b868456e8267de01f8cf514; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days