accept no compromises
Showing 1 - 25 of 80 RSS Feed

Files Date: 2006-07-09

TOR Virtual Network Tunneling Tool 0.1.1.22
Posted Jul 9, 2006
Authored by Roger Dingledine | Site tor.eff.org

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs).

Changes: Add async dns code, added a man page, various other enhancements.
tags | tool, remote, local, peer2peer
MD5 | c1706f46a96cc7491ff48e41be3c3d0a
DA-CFP-2006.txt
Posted Jul 9, 2006
Authored by Gadi Evron

Call For Papers for the DA (Drone Armies) Workshop. This workshop is for the purpose of bringing together members of the DA and MWP operational communities to share information, as well as plan future operations. It will be held August 10, 2006 in San Jose, California.

tags | paper, conference
MD5 | 9c7958a35524795e010e55cc056ac11d
rw-download.txt
Posted Jul 9, 2006
Authored by StorMBoY

RW::Download is susceptible to a remote file inclusion flaw via stats.php.

tags | exploit, remote, php, file inclusion
MD5 | 28221f8975f7bed2c8e1a043352a260d
atutor153-xss-sql.txt
Posted Jul 9, 2006
Site ellsec.org

ATutor version 1.5.3 is susceptible to cross site scripting and SQL injection attacks.

tags | exploit, xss, sql injection
MD5 | f4a1d60aa725494e7968cab7c0d7d672
advisory-355.txt
Posted Jul 9, 2006
Authored by trueend5 | Site kapda.ir

AjaxPortal version 3.0 is susceptible to a SQL injection flaw.

tags | exploit, sql injection
MD5 | 16f85693d2f33c14973fb134ce5c9fac
papoo3rc3.php.txt
Posted Jul 9, 2006
Authored by rgod | Site retrogod.altervista.org

PAPOO versions 3_RC3 and below remote SQL injection and administrative credential disclosure exploit.

tags | exploit, remote, sql injection
MD5 | b4e86032b3aaaee9a99f853ef75cc72a
Mandriva Linux Security Advisory 2006.118
Posted Jul 9, 2006
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory MDKSA-2006-118 - OpenOffice.org versions 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user. An unspecified vulnerability in Java Applets in OpenOffice.org versions 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents. Heap-based buffer overflow in OpenOffice.org versions 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-complicit attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

tags | advisory, java, overflow, arbitrary
systems | linux, mandriva
advisories | CVE-2006-2198, CVE-2006-2199, CVE-2006-3117
MD5 | c7d36c141e756d0ce80549bf0f5188b6
ms-w0rd.c
Posted Jul 9, 2006
Authored by naveed afzal

Microsoft Word exploit that produces a .doc file that demonstrates a memory access violation. Affected are versions 2003, 2002, 2000.

tags | exploit
MD5 | b66bde4a8cef907874cc011abd712850
extcalendar.txt
Posted Jul 9, 2006
Authored by OLiBekaS | Site bekas.6te.net

ExtCalendar versions 2 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion
MD5 | 5d6b2937c140e76be19f390a2f6f3e60
rPSA-2006-0122-1.txt
Posted Jul 9, 2006
Site rpath.com

rPath Security Advisory: 2006-0122-1 - Multiple kernel vulnerabilities have been address in rPath Linux.

tags | advisory, kernel, vulnerability
systems | linux
advisories | CVE-2006-2451, CVE-2006-2934
MD5 | 7a4b5ddb74df294bf08d5dc2a05b86df
PBLGuestbook132.txt
Posted Jul 9, 2006
Authored by Paisterist | Site neosecurityteam.net

PBL Guestbook versions 1.32 and below suffer from cross site scripting and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection
MD5 | 3c91c793f0a79a024e910ddaffe0899f
pivot130rc2.php.txt
Posted Jul 9, 2006
Authored by rgod | Site retrogod.altervista.org

Pivot versions 1.30 RC2 and below privilege escalation and remote command execution exploit.

tags | exploit, remote
MD5 | d95cfa7d604b7c850bf356f26b8ec7b8
hc-bugs.txt
Posted Jul 9, 2006
Authored by Soroush Dalili

Hosting Controller version 6.1 Hotfix (versions 3.2 and below) suffer from flaws that allow an attacker the ability to gain reseller privileges and administrative privileges.

tags | advisory
MD5 | 211368bf13f6d3ee51d523e2203c598c
Echo Security Advisory 2006.36
Posted Jul 9, 2006
Authored by Echo Security, Matdhule | Site advisories.echo.or.id

ExtCalendar versions 2.0 and below suffer from a remote file inclusion vulnerability.

tags | exploit, remote, file inclusion
MD5 | 353906d4fa3b0d22aae2ec571b36e395
Trustix Secure Linux Security Advisory 2006.40
Posted Jul 9, 2006
Authored by Trustix | Site http.trustix.org

Trustix Secure Linux Security Advisory #2006-0040: SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.

tags | advisory, remote, denial of service
systems | linux
advisories | CVE-2006-2934
MD5 | 031b70073304c561aab8b4b83e2d9e99
freewebshop21.txt
Posted Jul 9, 2006
Authored by LBDT | Site newangels-team.eu

FreeWebShop version 2.1 is susceptible to cross site scripting and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection
MD5 | 38782dc92237ff58b8561f0d89ca7bef
atutor153rc2.txt
Posted Jul 9, 2006
Site securitynews.ir

ATutor version 1.5.3RC2 is susceptible to cross site scripting flaws.

tags | advisory, xss
MD5 | 361bf70f20ee01165137486aba58517e
Debian Linux Security Advisory 1105-1
Posted Jul 9, 2006
Authored by Debian | Site debian.org

Debian Security Advisory 1105-1 - Federico L. Bossi Bonin discovered a buffer overflow in the HTTP Plugin in xine-lib, the xine video/media player library, that could allow a remote attacker to cause a denial of service.

tags | advisory, remote, web, denial of service, overflow
systems | linux, debian
advisories | CVE-2006-2802
MD5 | 62b2ab8347abf79b44050e61e860a55d
os2a_1006.txt
Posted Jul 9, 2006
Authored by Pavithra Hanchagaiah

PHP-Blogger version 2.2.5 is susceptible to cross site scripting flaws.

tags | exploit, php, xss
MD5 | 8d7aa11f408b19758b1fabc968047364
mcafeedos.txt
Posted Jul 9, 2006
Authored by johndoe1529

McAfee VirusScan Enterprise version 8.0.0 suffers from a denial of service condition.

tags | advisory, denial of service
MD5 | 2f940c17c55298161e6dc10fa555e384
Mandriva Linux Security Advisory 2006.117
Posted Jul 9, 2006
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory MDKSA-2006-117 - Stack-based buffer overflow in MiMMS 0.0.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions. Libmms uses the same vulnerable code.

tags | advisory, remote, denial of service, overflow, arbitrary
systems | linux, mandriva
advisories | CVE-2006-2200
MD5 | 8ec33294d6cf6850a0299d78a84e5a94
Zero Day Initiative Advisory 06-021
Posted Jul 9, 2006
Authored by Tipping Point | Site zerodayinitiative.com

The WebEx Downloader Plug-in suffers from a flaw that exists due to the lack of input validation on various ActiveX/Java control parameters and configuration directives. The "GpcUrlRoot" and "GpcIniFileName" ActiveX/Java control parameters allow an attacker to specify the location of a configuration file containing further control directives. This allows an attacker to transfer arbitrary files and executables to the target. The attacker can then leverage available configuration directives to execute the newly created executables thereby compromising the underlying system.

tags | advisory, java, arbitrary, activex
advisories | CVE-2006-3423
MD5 | a07490c7968278e740d27117f65e63d4
ag10.txt
Posted Jul 9, 2006
Authored by Luny

Advanced Guestbook version 1.0 suffers from a cross site scripting flaw.

tags | exploit, xss
MD5 | 8e9088ca1324533cc2112a42f2aa4ac4
micoDoS.txt
Posted Jul 9, 2006
Authored by tuergeist

MICO versions 2.3.12 and 2.3.12RC3 crash when contacted with wrong object key resulting in a denial of service condition.

tags | advisory, denial of service
MD5 | 9fac82e34ef6c3c690802e52b750ec0e
adplugbof.c
Posted Jul 9, 2006
Authored by Luigi Auriemma | Site aluigi.org

Proof of concept test exploit for AdPlug versions 2.0 and below (and CVS version 04 and below) which suffer from multiple heap and buffer overflows.

tags | exploit, overflow, proof of concept
MD5 | f09a7c940bd14eecdae78cfe2a639e17
Page 1 of 4
Back1234Next

File Archive:

July 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    2 Files
  • 2
    Jul 2nd
    3 Files
  • 3
    Jul 3rd
    15 Files
  • 4
    Jul 4th
    4 Files
  • 5
    Jul 5th
    15 Files
  • 6
    Jul 6th
    15 Files
  • 7
    Jul 7th
    10 Files
  • 8
    Jul 8th
    2 Files
  • 9
    Jul 9th
    10 Files
  • 10
    Jul 10th
    15 Files
  • 11
    Jul 11th
    15 Files
  • 12
    Jul 12th
    19 Files
  • 13
    Jul 13th
    16 Files
  • 14
    Jul 14th
    15 Files
  • 15
    Jul 15th
    3 Files
  • 16
    Jul 16th
    2 Files
  • 17
    Jul 17th
    8 Files
  • 18
    Jul 18th
    11 Files
  • 19
    Jul 19th
    15 Files
  • 20
    Jul 20th
    15 Files
  • 21
    Jul 21st
    15 Files
  • 22
    Jul 22nd
    7 Files
  • 23
    Jul 23rd
    2 Files
  • 24
    Jul 24th
    19 Files
  • 25
    Jul 25th
    23 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close