Section: .. / Last 20 Files /
| /// File Name: | USN-703-1.txt | Description:
| Ubuntu Security Notice USN-703-1 - Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary commands with user privileges. | | Homepage: | http://security.ubuntu.com/ | | File Size: | 6861 | | Related CVE(s): | CVE-2006-7236, CVE-2008-2383 | | Last Modified: | Jan 5 21:02:54 2009 | | MD5 Checksum: | 9352865d1436dc3218db4a78e9ce1d04 |
|
| /// File Name: | USN-702-1.txt | Description:
| Ubuntu Security Notice USN-702-1 - Gunter Hockel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares are enabled on the server by setting "registry shares = yes", "include = registry", or "config backend = registry", which is not the default. | | Homepage: | http://security.ubuntu.com/ | | File Size: | 10900 | | Related CVE(s): | CVE-2009-0022 | | Last Modified: | Jan 5 21:00:41 2009 | | MD5 Checksum: | 16c06750eef20e3808874ed0c796b230 |
|
| /// File Name: | phpauctionsystem-insecure.txt | Description:
| PHP Auction System suffers from an insecure cookie handling vulnerability. | | Author: | ZoRLu | | File Size: | 1265 | | Last Modified: | Jan 5 20:59:51 2009 | | MD5 Checksum: | 40f2f0c3660aee65abfa178d0a395854 |
|
| /// File Name: | phpauctionsystem-sqlxss.txt | Description:
| PHP Auction System suffers from cross site scripting and remote SQL injection vulnerabilities. | | Author: | X0r | | File Size: | 1924 | | Last Modified: | Jan 5 20:58:16 2009 | | MD5 Checksum: | dff3935d238a050c0de9d81375c92e77 |
|
| /// File Name: | joomlaphoca-sql.txt | Description:
| Joomla Phoca Documentation remote SQL injection exploit that makes use of index.php. | | Author: | EcHoLL | | Homepage: | http://www.warezturk.org/ | | File Size: | 1560 | | Last Modified: | Jan 5 20:55:31 2009 | | MD5 Checksum: | a42915d816e3b2ea44e5e52cf5d103fc |
|
| /// File Name: | lfi-rfi2.txt | Description:
| Local / Remote file inclusion scanner that attempts to make use of a c99 shell on a vulnerable host. | | Author: | baltazar | | Homepage: | http://www.darkc0de.com/ | | File Size: | 6218 | | Last Modified: | Jan 5 20:52:19 2009 | | MD5 Checksum: | a1530ae1679861ae4a4d3387842eac0e |
|
| /// File Name: | walusoft-traversal.txt | Description:
| Walusoft TFTPServer2000 version 3.6.1 suffers from a directory traversal vulnerability. | | Author: | princeofnigeria | | File Size: | 2845 | | Last Modified: | Jan 5 20:46:20 2009 | | MD5 Checksum: | 64146b5fc1a21ec677636cddac2a0ac7 |
|
| /// File Name: | dmp161lst4-overflow.txt | Description:
| Destiny Media Player version 1.61 .lst file local buffer overflow proof of concept exploit that spawns calc.exe. | | Author: | Stack | | Homepage: | http://v4-team.com/ | | File Size: | 1537 | | Last Modified: | Jan 5 20:42:34 2009 | | MD5 Checksum: | 950e82dd52b76be3b441537b1c8946d6 |
|
| /// File Name: | seacureit-cfp2009.txt | Description:
| SEaCURE.IT is the first international technical conference ever held in Italy on security related topics, aimed at bringing together the leading experts from all over the world, to create a unique setting for networking and discussion among the speakers and the attendees. The 2009 edition will be held from May 19th to the 22nd in Villasimius, Sardinia. | | Homepage: | http://www.seacure.it/ | | File Size: | 5347 | | Last Modified: | Jan 5 20:30:16 2009 | | MD5 Checksum: | 28e55afb975a46ebd64652a868002743 |
|
| /// File Name: | plxautoreminder-sql.txt | Description:
| plxAutoReminder version 3.7 suffers from a remote SQL injection vulnerability. | | Author: | ZoRLu | | File Size: | 1188 | | Last Modified: | Jan 5 20:28:23 2009 | | MD5 Checksum: | 0da4a3c15c3933f0b1db0d73d765c906 |
|
| /// File Name: | safari-heap.txt | Description:
| Safari array integer overflow proof of concept exploit. | | Author: | SkyLined | | File Size: | 26629 | | Last Modified: | Jan 5 20:27:13 2009 | | MD5 Checksum: | dd9f8f395b56e7be0ccfd2abb77be20d |
|
| /// File Name: | dmp161lst3-overflow.txt | Description:
| Destiny Media Player version 1.61 .lst file local buffer overflow proof of concept exploit that spawns calc.exe. | | Author: | H-T Team | | Homepage: | http://no-hack.fr/ | | File Size: | 1557 | | Last Modified: | Jan 5 20:26:06 2009 | | MD5 Checksum: | 895b67587da6e19c6b19ca60e24184aa |
|
| /// File Name: | tor.uclibc.i686.20090105.iso | Description:
| Tor-ramdisk is an i686 uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. Security is enhanced by employing a monolithically compiled GRSEC/PAX patched kernel and hardened system tools. Privacy is enhanced by turning off logging at all levels so that even the Tor operator only has access to minimal information. Finally, since everything runs in ephemeral memory, no information survives a reboot, except for the Tor configuration file and the private RSA key which may be exported/imported by FTP. | | Author: | Anthony G. Basile | | Homepage: | http://opensource.dyc.edu/tor-ramdisk | | Changes: | Tor updated to 0.2.0.32. Kernel updated to Linux-2.6.25.17 plus Gentoo\'s hardened-patches-2.6.25-12.extras. | | File Size: | 4145152 | | Last Modified: | Jan 5 20:23:11 2009 | | MD5 Checksum: | 62155716de0033efdbbbfcd30e7a289e |
|
| /// File Name: | solucion-sql.txt | Description:
| SolucionWeb suffers from a remote SQL injection vulnerability in main.php. | | Author: | Ehsan_Hp200 | | File Size: | 1406 | | Last Modified: | Jan 5 20:08:35 2009 | | MD5 Checksum: | 76a412aa82f1d4dfa57dac80a5a5d664 |
|
| /// File Name: | pollpro-xsrf.txt | Description:
| PollPro version 3.0 appears to suffer from a cross site request forgery vulnerability. | | Author: | The_0nur-n0x | | File Size: | 1851 | | Last Modified: | Jan 5 20:04:43 2009 | | MD5 Checksum: | c2ab74358b5bd4e0c25d3f8c9080eed2 |
|
| /// File Name: | webspell-edit.txt | Description:
| webSPELL versions 4.01.02 and below suffer from a remote edit topics vulnerability. | | Author: | StAkeR | | File Size: | 953 | | Last Modified: | Jan 5 20:03:51 2009 | | MD5 Checksum: | aea9f27babb831af8e900adb5c17f3f4 |
|
| /// File Name: | pnphpbb212i-lfi.txt | Description:
| PNphpBB2 versions 1.2i and below suffer from multiple local file inclusion vulnerabilities. | | Author: | StAkeR | | File Size: | 1157 | | Last Modified: | Jan 5 20:00:00 2009 | | MD5 Checksum: | 0021ce7144c2aef7db09e77c28f743ea |
|
| /// File Name: | msfxdc-contest.txt | Description:
| MSFXDC (MetaSploit Framework eXploits Development Contest) is a challenge where the main goal is to code the largest number of new Metasploit Framework exploits modules. MSFXDC is organized by JA-PSI. | | Homepage: | http://www.ja-psi.com/ | | File Size: | 1776 | | Last Modified: | Jan 5 19:55:31 2009 | | MD5 Checksum: | 32fe7daf5d86671fd2920b2e4eec0af3 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
