what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 29 of 29

Files Date: 2004-11-12 to 2004-11-13

pop_exp2.py

Posted Nov 12, 2004

Authored by Varun Uppal

YPOPS version 0.6 exploit that binds a shell to port 4444.

tags | exploit, shell

SHA-256 | c13361895b2312a5aceebae12adcb8828b7f7a609ec446af093637d7dbfb40d5

Download | Favorite | View

nortelVPN.txt

Posted Nov 12, 2004

Authored by Network Intelligence (I) Pvt. Ltd.

The Nortel Networks Contivity VPN Client authentication error message provides more information than is necessary, thus allowing an attacker to discover existing users on the system.

tags | advisory

SHA-256 | 6576f41f0da4b9552072593807ebc01db35f906e9339e3d99c75ff808b443230

Download | Favorite | View

squirrelXSS.txt

Posted Nov 12, 2004

Authored by Joost Pol | Site squirrelmail.org

SquirrelMail versions 1.4.3a and below suffer from a cross site scripting issue in the decoding of encoded text in certain headers. It correctly decodes the specially crafted header, but does not sanitize the decoded strings.

tags | advisory, xss

SHA-256 | 7e8ba7c0955736c617724cfb48418a3e21a671ca561f31c735c783a6d3f15e45

Download | Favorite | View

webcalendar.txt

Posted Nov 12, 2004

Authored by Joxean Koret

The PHP application WebCalendar is susceptible to cross site scripting, http response splitting, code execution, path disclosure, and privilege escalation vulnerabilities.

tags | exploit, web, php, vulnerability, code execution, xss

SHA-256 | 04d765060243653b3a30ecc05d58fd77ebd4ed9f01c79850ecc9c7a6106b048f

Download | Favorite | View