Section:  .. / 0501-exploits  /

Page 4 of 4
<< 1 2 3 4 >> Files 75 - 92 of 92
Currently sorted by: File SizeSort By: File Name, Last Modified

 ///  File Name: SSA-20050120-22.txt
Description:
STG Security Advisory: JSBoard versions 2.0.9 and below suffer from an input validation flaw that allows for arbitrary file reading.
Author:Jeremy Bae
Homepage:http://stgsecurity.com/
File Size:1557
Last Modified:Jan 25 06:18:39 2005
MD5 Checksum:3b1609ac471d68125c376daa4ee846e6

 ///  File Name: FVS318.txt
Description:
The Netgear FVS318 version 2.4 router is susceptible to filter bypass when the URL is hex encoded and it also have a cross site scripting flaw.
Author:Paul Kurczaba
Homepage:http://www.securinews.com/
File Size:1555
Last Modified:Jan 18 06:47:40 2005
MD5 Checksum:06661f61e9927239230a8edbf0e44e0c

 ///  File Name: IEurlflaw.txt
Description:
This code calls a URL in the browser window but fails to update the address bar in Internet Explorer. It appears that the form submission is suspended with the interrupt of the 'window.alert' call.
Author:Graeme Stewart
File Size:1527
Last Modified:Jan 25 07:55:50 2005
MD5 Checksum:5786b1d98471a885d0588c08908ee348

 ///  File Name: exim-exploit.c
Description:
Proof of concept local exploit for Exim version 4.41.
Related File:01.14.05.txt
File Size:1475
Last Modified:Jan 19 07:06:41 2005
MD5 Checksum:a710a65db5bce4ca9cedd2b3d59cc373

 ///  File Name: ss11012005.txt
Description:
MPM Guestbook Pro 1.05 is susceptible to file inclusion and directory traversal attacks.
Author:SmOk3
File Size:1465
Last Modified:Jan 16 06:57:33 2005
MD5 Checksum:ad15ccd53989598e026abe7b2a496c88

 ///  File Name: WebWasherCONNECT.txt
Description:
WebWasher Classic has a design flaw weakness where the CONNECT method allows remote attackers to connect to any server listening on the localhost interface of the proxy server.
Author:Oliver Karow
Homepage:http://www.oliverkarow.de/
File Size:1406
Last Modified:Jan 29 09:14:25 2005
MD5 Checksum:73ddc497f3ae9999b4e962bbea99a087

 ///  File Name: siteman.noam.txt
Description:
Siteman versions 1.1.10 and below remote administrative account addition exploit.
Author:Noam Rathaus
Related Exploit:siteman.txt"
File Size:1375
Last Modified:Jan 27 05:03:14 2005
MD5 Checksum:23d964d6078eb95f5bdac2764881067c

 ///  File Name: sparkleBlog.txt
Description:
Direct access to administrative pages in SparkleBlog do not require any authentication. Additionally, is it susceptible to cross site scripting flaws.
Author:Kovacs Laszlo
File Size:1336
Last Modified:Jan 18 06:36:42 2005
MD5 Checksum:12b17d789a87a73a6e5108db00648558

 ///  File Name: arkeia.txt
Description:
Arkeia versions 4.2.x, 5.2.x, and 5.3.x all have blank default root passwords and various other flaws.
Author:Maciej Bogucki
File Size:1226
Last Modified:Jan 16 00:02:26 2005
MD5 Checksum:a0a10201f97f5a8301a7f09985145596

 ///  File Name: un-htget_0.9x.txt
Description:
Local root exploit for htget versions 0.9.x and below.
Author:nekd0
Homepage:http://unl0ck.void.ru/
File Size:994
Last Modified:Jan 6 03:56:25 2005
MD5 Checksum:adf05b016c2b23bded09c401ec9f22c5

 ///  File Name: woltlabXSS.txt
Description:
Woltlab Burning Board Lite version 1.0.0 and 1.0.1e are susceptible to a cross site scripting flaw.
Author:Martin Heistermann
File Size:968
Last Modified:Jan 11 02:24:17 2005
MD5 Checksum:7a9c468289b188eda701354e7ce28e40

 ///  File Name: siteman119.txt
Description:
Siteman version 1.1.9 is susceptible to cross site scripting attacks.
Author:Pi3ch
Homepage:http://www.persianhacker.net
File Size:913
Last Modified:Jan 16 07:19:52 2005
MD5 Checksum:dfbac9435848a88522bc7e07e3e2fcb1

 ///  File Name: jakarta556_xss.txt
Description:
Apache Jakarta Tomcat version 5.5.6 is susceptible to cross site scripting attacks.
Author:Oliver Karow
Homepage:http://www.oliverkarow.de/
File Size:910
Last Modified:Jan 7 02:42:07 2005
MD5 Checksum:8d2da4e59e74ea24a42efaf5451139f6

 ///  File Name: invisionSQL.txt
Description:
The Invision Community Blog system is susceptible to a SQL injection attack on the eid variable.
Author:darkhawk matrix
Homepage:http://www.matrix2k.org
File Size:584
Last Modified:Jan 11 02:25:30 2005
MD5 Checksum:eedcc9e119950fc30714bfedd8be408b

 ///  File Name: divxplayerbug.dps
Description:
Proof of concept exploit for DivX player versions 2.6 and below that allow for arbitrary file overwriting via a flaw in handling skins.
Author:Luigi Auriemma
Homepage:http://aluigi.altervista.org/
Related File:divxplayerbug.txt
File Size:390
Last Modified:Jan 25 07:31:15 2005
MD5 Checksum:9cf43a1b2697117eee6f044731ad48e9

 ///  File Name: forumKIT.txt
Description:
forumKIT 1.0 suffers from a cross site scripting vulnerability.
Author:ne0
File Size:331
Last Modified:Jan 16 05:52:57 2005
MD5 Checksum:071b23c75779e0cb3a1f58618583b544

 ///  File Name: exploits-winamp.tgz
Description:
Two exploits for Winamp 5.05 and 5.08. They make use of the buffer overflow vulnerability discovered by NSFOCUS.
Author:Rojodos
Related File:SA2005-01.txt
File Size:314
Related CVE(s):CAN-2004-1150
Last Modified:Jan 28 21:01:24 2005
MD5 Checksum:b7230f0d8cc7a676a94142a80a56e9d4