what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 5 of 5

Files Date: 2005-01-30 to 2005-01-31

WC-ms05002-ani-expl-cb.c

Posted Jan 30, 2005

Authored by WhiskyCoders | Site bennupg.ath.cx

Microsoft Internet Explorer .ANI file handling exploit. Modified version of the houseofdabus exploit. Universal version of the exploit. Tested on: Windows Server 2003, Windows XP SP0/SP1, Windows 2000 SP2/SP3/SP4.

tags | exploit

systems | windows

SHA-256 | 7d28b6b89f96a1823cf6133c4dfbbf4eeebb9afb847e5f3ffc5da17e887c96b4

Download | Favorite | View

Gentoo Linux Security Advisory 200501-41

Posted Jan 30, 2005

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200501-41 - A bug in TikiWiki allows certain users to upload and execute malicious PHP scripts. Versions below 1.8.5 are affected.

tags | advisory, php

systems | linux, gentoo

SHA-256 | 7b3a3fe50c91b53f142a4fdbc5fc1426702ce95d77746d0e6afdb04e2b6f4e47

Download | Favorite | View

imd_advisory.txt

Posted Jan 30, 2005

Authored by Steven | Site lovebug.org

The webmail portion of Infinite Mobile Delivery 2.6 from Captaris, Inc. contains a Cross Site Scripting vulnerability. In addition to the XSS, an even smaller issue exists where a user can determine the installation path of the client and where e-mails are stored.

tags | exploit, xss

SHA-256 | ab16cccb8d5dac3bb83fa685da0c66ecaf107bea553a5bde32efb50a81721cbf

Download | Favorite | View

ocs.c

Posted Jan 30, 2005

Authored by OverIP | Site hacklab.tk

Compact mass scanner for Cisco routers with default telnet/enable passwords.

tags | tool, scanner

systems | cisco, unix

SHA-256 | abd2a9fc125008f980986f130c505798029e1a956f0d037ae9b643b908ece46d

Download | Favorite | View

squirrelInclusion.txt

Posted Jan 30, 2005

Authored by Jonathan Angliss | Site squirrelmail.org

SquirrelMail Security Advisory - SquirrelMail 1.4.4 has been released to resolve a number of security issues. Manoel Zaninetti reported an issue in src/webmail.php which would allow a crafted URL to include a remote web page. A possible cross site scripting issue exists in src/webmail.php that is only accessible when the PHP installation is running with register_globals set to On.

tags | advisory, remote, web, php, xss

advisories | CVE-2005-0104, CVE-2005-0103

SHA-256 | 5773619867fb37cf0ce9656875f5125f481bb03dec469652efec6634f72bd105

Download | Favorite | View