what you don't know can hurt you
Showing 1 - 25 of 99 RSS Feed

Files Date: 2006-04-12

Vegadns-0.99.txt
Posted Apr 12, 2006
Authored by king_purba | Site kandangjamur.net

VegaDNS 0.99 suffers from XSS and a SQL injection vulnerability in index.php and users.php

tags | advisory, php, sql injection
MD5 | c052b388f159a84a25470a360aa7ab02
A_Modular_Approach_to_Data_Validation_v1.0.pdf
Posted Apr 12, 2006
Authored by Stephen de Vries | Site corsaire.com

This paper presents a modular approach to performing thorough data validation in modern web applications so that the benefits of modular component based design; extensibility, portability and re-use can be released. The paper begins with an explanation of the vulnerabilities introduced through poor validation and then goes on to discuss the merits of a number of common data validation methodologies. A modular approach is introduced together with practical examples of how to implement such a scheme in a web application. It also provides information on common attack vectors, principles of validation, a modular solution and implementation of that solution.

tags | paper, web, vulnerability
MD5 | a0b2f3ac1b5d56c1eb5b580c14a11f16
advisory4.5.06.txt
Posted Apr 12, 2006
Authored by silentproducts | Site silent-products.com

Myspace.com - Intricate Script Injection Vulnerability. Includes a very detailed discussion of the vulnerability and the security / insecurity of Myspace in general.

tags | advisory
MD5 | 9198b87b5855ea29563b817528a302db
Autogalleryv0.41.txt
Posted Apr 12, 2006
Site elitemexico.org

Autogallery v0.41 suffers from multiple XSS vulnerabilities.

tags | advisory, vulnerability
MD5 | 2ebb223e59ea1326c3e754545c6795be
AzDGVote.txt
Posted Apr 12, 2006
Site lezr.com

AzDGVote suffers from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion
MD5 | 0c2aa928a80f8a8d4cffef582b8ea365
UltrVNC1.0.1.py.txt
Posted Apr 12, 2006
Authored by Paul Haas | Site Redspin.com

Ultr@VNC 1.0.1 Client Buffer Overflow exploit. Spawns an instance of calc.exe.

tags | exploit, overflow
MD5 | fddff6e4506ff5a5488ad349c73d6c11
Manila-9.5.txt
Posted Apr 12, 2006
Site d4igoro.blogspot.com

Manila versions less than or equal to 9.6 suffer from multiple XSS vulnerabilities.

tags | advisory, vulnerability
MD5 | bf77f4b04a685d5ed1d3d1f028b7c177
Confixx3.1.2
Posted Apr 12, 2006
Site LoK-Crew.de.am

Confixx 3.1.2 suffers from a SQL injection vulnerability.

tags | advisory, sql injection
MD5 | 4cdb6c22cdaf4343852b2202d46d72e5
Tritanium-1.2.3.txt
Posted Apr 12, 2006
Site d4igoro.blogspot.com

Tritanium Bulletin Board 1.2.3 suffers from XSS.

tags | advisory
MD5 | ef7868e62646e7db7ca6396e28625b5c
Zero Day Initiative Advisory 06-07
Posted Apr 12, 2006
Authored by Tipping Point | Site zerodayinitiative.com

ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability.

tags | advisory
systems | windows
MD5 | f39d1e1ccdee6a1ac8e585d7b7ca356a
SAXoPRESS.txt
Posted Apr 12, 2006
Authored by securiteam

SAXoPRESS suffers from a directory transversal vulnerability, allowing an attacker to read the contents of files on the server.

tags | advisory
MD5 | 4dd9274802deb6675aae09221adb034d
TUGZip.txt
Posted Apr 12, 2006
Authored by Hamid Network Security Team | Site hamid.ir

TUGZip 3.4.0.0, TUGZip 3.3.0.0, and TUGZip 3.1.0.2 do not properly sanitize archives, making it possible to overwrite arbitrary files using a directory transversal attack.

tags | advisory, arbitrary
MD5 | 72c2a99b79f16aed2cfd7a89e0011b75
PHPWebGallery-1.4.1.txt
Posted Apr 12, 2006
Authored by Moroccan Security Team

PHPWebGallery 1.4.1 suffers from multiple XSS vulnerabilities.

tags | advisory, vulnerability
MD5 | 28364bc661abf5ee51acadca7dfc6945
phpMyForum-4.0.txt
Posted Apr 12, 2006
Authored by Moroccan Security Team

phpMyForum 4.0 suffers from XSS and CRLF injection vulnerabilities.

tags | advisory, vulnerability
MD5 | babd12318ebf5de7a1913c913c53d2f6
Jbook-gb.txt
Posted Apr 12, 2006
Authored by Moroccan Security Team

Jbook Guestbook suffers from XSS in index.php

tags | advisory, php
MD5 | 662a7c4dafbc55de594ed0547ac65aaa
Sire2.0Nws.txt
Posted Apr 12, 2006
Authored by Moroccan Security Team

If register_globals is on, Sire 2.0 Nws suffers from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion
MD5 | c54fffc224ee1f8625ba5e1b7b61e854
Chipmunk-gb.txt
Posted Apr 12, 2006
Authored by Dr.Jr7 | Site lezr.com

Chipmunk Guestbook suffers from SQL injection that allows for authentication bypass.

tags | advisory, sql injection
MD5 | 78bc7546a5ad1b306d99bd00eb0dd0f9
SaphpLesson.txt
Posted Apr 12, 2006
Authored by almokanna

SaphpLesson 3.0 suffers from XSS in search.php

tags | advisory, php
MD5 | 8630facd987ccdfd42d29e2e17930786
adv28-K-159-2006.txt
Posted Apr 12, 2006
Authored by eufrato | Site advisories.echo.or.id

Clever Copy versions less than or equal to 3.0 allows one of its configuration files to be read remotely, resulting in critical information disclosure. Exploit included.

tags | exploit, info disclosure
MD5 | 509703859e9cfdb8fe028e0863c43e8f
cherokee-0.5.0.txt
Posted Apr 12, 2006
Authored by Ruben Garrote Garcia

Cherokee webserver versions less than 0.5.1 allows for XSS in its 400 error message.

tags | advisory
MD5 | d9c96e69c5e5e399cf1c3663e97256d6
maxdev-cms.txt
Posted Apr 12, 2006
Authored by king_purba

MAXDEV CMS suffers from full path disclosure and SQL injection vulnerabilities.

tags | advisory, vulnerability, sql injection
MD5 | 0710e0f9bd5f7dc2f9172708529667b4
HP Security Bulletin 2006-11.32
Posted Apr 12, 2006
Authored by Hewlett Packard | Site hp.com

HPSBUX02111 SSRT061132 rev.1 - HP-UX su(1) Local Unauthorized Access

tags | advisory, local
systems | hpux
MD5 | 0dfe84aa2c3bc0c0d8817ed5952cb30f
HP Security Bulletin 2006-11.10
Posted Apr 12, 2006
Authored by Hewlett Packard | Site hp.com

HPSBUX02110 SSRT061110 rev.1 - HP-UX Running wu-ftpd Remote Denial of Service (DoS)

tags | advisory, remote, denial of service
systems | hpux
MD5 | 94ef34123175c497e26820467e6ce943
HP Security Bulletin 2006-11.33
Posted Apr 12, 2006
Authored by Hewlett Packard | Site hp.com

HPSBUX02108 SSRT061133 rev.3 - HP-UX running Sendmail, Remote Execution of Arbitrary Code.

tags | advisory, remote, arbitrary
systems | hpux
MD5 | 9afabbbe3996b4a99a3bf98ff4306122
Secunia Security Advisory 19566
Posted Apr 12, 2006
Authored by Secunia | Site secunia.com

Secunia Security Advisory - Data Security has reported a vulnerability in SAXoPRESS, which can be exploited by malicious people to disclose sensitive information.

tags | advisory
MD5 | 4a057b10d38335a537503d5263d57fec
Page 1 of 4
Back1234Next

File Archive:

June 2021

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    35 Files
  • 2
    Jun 2nd
    14 Files
  • 3
    Jun 3rd
    40 Files
  • 4
    Jun 4th
    22 Files
  • 5
    Jun 5th
    1 Files
  • 6
    Jun 6th
    1 Files
  • 7
    Jun 7th
    19 Files
  • 8
    Jun 8th
    14 Files
  • 9
    Jun 9th
    39 Files
  • 10
    Jun 10th
    20 Files
  • 11
    Jun 11th
    22 Files
  • 12
    Jun 12th
    0 Files
  • 13
    Jun 13th
    0 Files
  • 14
    Jun 14th
    0 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close