Section: .. / 0508-exploits /
| /// File Name: |
AD20050830.txt |
Description:
|
BNBT EasyTracker is susceptible to a remote denial of service vulnerability when accepting a malformed HTTP request. Demonstration exploit provided. Versions 7.7r3.2004.10.27 and below are affected.
| | Author: | Sowhat | | Homepage: | http://secway.org/advisory/AD20050830.txt | | File Size: | 8779 | | Last Modified: | Aug 31 02:09:09 2005 |
| MD5 Checksum: | 2ac337d4908927ed071926acbb6d4270 |
|
| /// File Name: |
ADSLFR4II.txt |
Description:
|
Nth Dimension Security Advisory (NDSA20050719) - Mentor's ADSL-FR4II router, firmware version 2.00.0111 2004.04.09, is susceptible to unauthenticated administrative access, downloading of configuration files with the system password, and denial of service attacks.
| | Author: | Tim Brown | | Homepage: | http://www.nth-dimension.org.uk/ | | File Size: | 3572 | | Last Modified: | Aug 17 00:59:01 2005 |
| MD5 Checksum: | f3bbb1c54db3bfc7d745084f66ad82a6 |
|
| /// File Name: |
atutor151.txt |
Description:
|
ATutor versions 1.5.1 and below suffer from multiple cross site scripting vulnerabilities.
| | Author: | matrix killer, h4cky0u | | Homepage: | http://www.h4cky0u.org | | File Size: | 1482 | | Last Modified: | Aug 19 00:59:26 2005 |
| MD5 Checksum: | fccc7b6e4fffe218a5e27fd4fae0f546 |
|
| /// File Name: |
autolinks21.txt |
Description:
|
AutoLinks Pro 2.1 suffers from a remote file inclusion vulnerability.
| | Author: | NewAngels Team | | File Size: | 1308 | | Last Modified: | Aug 31 01:22:26 2005 |
| MD5 Checksum: | a9273540bd7022124f6c8cb05c02da63 |
|
| /// File Name: |
backupexec_dump.pm.txt |
Description:
|
Veritas Backup Exec Agent remote file access exploit that makes use of a logic flaw. This exploit is part of the Metasploit framework and works against all current versions of this Agent.
| | File Size: | 8044 | | Last Modified: | Aug 12 03:02:26 2005 |
| MD5 Checksum: | ae93e11c686917a4a9744af5e2f5e9e3 |
|
| /// File Name: |
bbcodeLogout.txt |
Description:
|
Proof of concept information for a flaw in BBCode that works against vBulletin and phpBB.
| | Author: | h4cky0u | | Homepage: | http://www.h4cky0u.org | | File Size: | 1401 | | Last Modified: | Aug 24 00:47:21 2005 |
| MD5 Checksum: | 6d35da96e7140acf5dc447d925174aaf |
|
| /// File Name: |
beaXSS.txt |
Description:
|
BEA WebLogic versions 8.1 SP4 and below suffer from a cross site scripting flaw in the Administration console.
| | Author: | GomoR | | Homepage: | http://www.GomoR.org/ | | File Size: | 1433 | | Last Modified: | Aug 25 00:59:40 2005 |
| MD5 Checksum: | 75cb275908dde195433f902633155e90 |
|
| /// File Name: |
bfccown.zip |
Description:
|
Proof of concept exploit for the flaws relating to BFCC versions 1.22_A and below and BFVCC versions 2.14_B and below.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.altervista.org | | Related File: | bfccown.txt | | File Size: | 11110 | | Last Modified: | Aug 31 01:50:44 2005 |
| MD5 Checksum: | 0918b1298c512f28393bf9f2d5603a9b |
|
| /// File Name: |
cfbbxss.txt |
Description:
|
CFBB version 1.1.10 suffers from a cross site scripting vulnerability.
| | Author: | stormhacker | | Homepage: | Http://www.security-arab.com | | File Size: | 253 | | Last Modified: | Aug 9 04:47:39 2005 |
| MD5 Checksum: | e06de2ff9c58f6cfaa80b3686a759a4b |
|
| /// File Name: |
citibankXSS.txt |
Description:
|
Citibank's website in the UK is susceptible cross site scripting attacks.
| | Author: | Andrew Smith | | File Size: | 2584 | | Last Modified: | Aug 17 01:02:15 2005 |
| MD5 Checksum: | 8e84876372ebab674c0b73a3848af57e |
|
| /// File Name: |
clarolineTraverse.txt |
Description:
|
Claroline 1.6.1 is vulnerable to multiple directory traversal attacks. Teacher access is needed for successful exploitation.
| | Author: | Robbe De Keyzer | | File Size: | 1832 | | Last Modified: | Aug 13 02:41:12 2005 |
| MD5 Checksum: | a6a8f5daf900f15a89847adab37ab590 |
|
| /// File Name: |
comdevInclusion.txt |
Description:
|
Comdev eCommerce 3.0 is susceptible to a remote file inclusion flaw.
| | File Size: | 307 | | Last Modified: | Aug 6 01:48:08 2005 |
| MD5 Checksum: | 3351b2ff267b0c563e160ad9b37dd854 |
|
| /// File Name: |
comdevTraversal.txt |
Description:
|
Comdev eCommerce 3.0 is susceptible to a directory traversal flaws.
| | File Size: | 336 | | Last Modified: | Aug 6 01:47:08 2005 |
| MD5 Checksum: | 39c136ae1565af349c02026c09da31da |
|
| /// File Name: |
ContivitySystem.txt |
Description:
|
When the Nortel Contivity VPN Client client is running as a service, it is possible to manipulate the interface of the client and escalate privileges to that of the LocalSystem account. Version 05_01.030 is affected.
| | Author: | Jeff Peadro | | File Size: | 1266 | | Last Modified: | Aug 11 01:06:44 2005 |
| MD5 Checksum: | 2dc8e01c10369e2582e95e1f7055f609 |
|
| /// File Name: |
cosmoshop81078.txt |
Description:
|
Cosmoshop versions 8.10.78 and below suffer from SQL injection flaws, clear text passwords, and directory traversal flaws.
| | Author: | l0om | | Homepage: | http://www.excluded.org | | File Size: | 1466 | | Last Modified: | Aug 31 01:32:48 2005 |
| MD5 Checksum: | 43eb2a684a72cba7453b395b76af5865 |
|
| /// File Name: |
cpan.c |
Description:
|
Remote code execution exploit for cPanel versions 9.x and below that binds a shell to port 1666.
| | Author: | PakBraiN | | File Size: | 1602 | | Last Modified: | Aug 12 02:53:10 2005 |
| MD5 Checksum: | e4eb40e742dcd986e712f8dc6e4568e2 |
|
| /// File Name: |
dvbbsXSS.txt |
Description:
|
DVBBS version 7.1 suffers from a cross site scripting flaw.
| | Author: | Lostmon | | File Size: | 1651 | | Related OSVDB(s): | 18512 | | Last Modified: | Aug 9 05:11:31 2005 |
| MD5 Checksum: | 09e5aeaf1577072e5cc026aa88052bab |
|
| /// File Name: |
ECWshop.txt |
Description:
|
ECW Shop version 6.0.2 suffers from cross site scripting, various injection, and disclosure vulnerabilities.
| | Author: | John Cobb | | Homepage: | http://www.NoBytes.com | | File Size: | 2023 | | Last Modified: | Aug 17 02:35:33 2005 |
| MD5 Checksum: | 75c91c659c362bb159406bb366bc7aff |
|
| /// File Name: |
edirectory_imonitor.pm.txt |
Description:
|
Novell eDirectory 8.7.3 iMonitor service remote buffer overflow exploit.
| | File Size: | 2235 | | Last Modified: | Aug 15 01:15:34 2005 |
| MD5 Checksum: | fdf29f12ee0e8206f662c61a4ccf9757 |
|
| /// File Name: |
elmexPoC.c |
Description:
|
Proof of concept exploit for Elm versions 2.5.8 and below that makes use of a buffer overflow during the parsing of the Expires field.
| | Author: | c0ntex | | Related File: | elm-data.tar.gz | | File Size: | 2857 | | Last Modified: | Aug 24 01:17:59 2005 |
| MD5 Checksum: | 30c19e44672429391d6d1363aa6295f6 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
