Section: .. / 0612-exploits /
| /// File Name: |
2006-exploits.tgz |
Description:
|
Complete comprehensive archive of all exploits posted to Packet Storm for 2006.
| | Homepage: | http://packetstormsecurity.org/ | | File Size: | 10976296 | | Last Modified: | Jan 1 21:20:36 2007 |
| MD5 Checksum: | 65a944cf806603eb629ea8f94ac5d631 |
|
| /// File Name: |
adwords-crlf-injection.pdf |
Description:
|
Multiple CRLF injection aka HTTP response splitting vulnerabilities have been identified in Google AdWords which may be exploited to inject arbitrary HTTP headers.
| | Author: | Debasis Mohanty | | Homepage: | http://hackingspirits.com/ | | File Size: | 123143 | | Last Modified: | Dec 15 05:14:08 2006 |
| MD5 Checksum: | 489827dac405b8f825bc0e35c68a8d75 |
|
| /// File Name: |
envolution.txt |
Description:
|
Remote code execution exploit for Envolution versions 1.1.0 and below.
| | Author: | Kacper | | Homepage: | http://www.rahim.webd.pl/ | | File Size: | 13954 | | Last Modified: | Dec 6 01:11:07 2006 |
| MD5 Checksum: | 1e8dcd6da9786a4e9e8c12f659ad841f |
|
| /// File Name: |
hlstats-sql.txt |
Description:
|
HLStats versions between 1.34 and 1.20 suffer from a SQL injection vulnerability. Exploit included.
| | Author: | Michael Brooks | | File Size: | 13387 | | Last Modified: | Dec 27 19:28:27 2006 |
| MD5 Checksum: | ad6c9c262da52bf4c358930ad1be5fe4 |
|
| /// File Name: |
openldap-kbind-p00f.c |
Description:
|
Exploit for a buffer overflow in the Kerberos KBIND authentication code in the OpenLDAP slapd server for versions 2.4.3 and below. Note that the vulnerable code only exists in versions compiled with the --enabled-kbind option.
| | Author: | Solar Eclipse | | Homepage: | http://www.phreedom.org/solar/ | | Related File: | openLDAPslapd.txt | | File Size: | 10773 | | Last Modified: | Dec 15 03:47:44 2006 |
| MD5 Checksum: | b23616b663333deb2fb8aa86d6dceb05 |
|
| /// File Name: |
csrssexe.txt |
Description:
|
Microsoft Windows NTRaiseHardError Csrss.exe proof of concept memory disclosure exploit.
| | Author: | Ruben Santamarta | | Homepage: | http://www.reversemode.com | | File Size: | 7318 | | Last Modified: | Dec 27 20:07:57 2006 |
| MD5 Checksum: | cfd2b9646a35f64abc832c2dfac18df5 |
|
| /// File Name: |
ixprim12-sql.txt |
Description:
|
Ixprim version 1.2 remote blind SQL injection exploit.
| | Author: | DarkFig | | File Size: | 7282 | | Last Modified: | Dec 21 22:08:03 2006 |
| MD5 Checksum: | 6fc316346c50c165c7912d9525431184 |
|
| /// File Name: |
phpicalendar-xss.txt |
Description:
|
PHP icalendar versions 2.23rc1 and below are susceptible to multiple cross site scripting vulnerabilities.
| | Author: | Lostmon | | Homepage: | http://lostmon.blogspot.com/ | | File Size: | 6547 | | Last Modified: | Dec 27 20:09:23 2006 |
| MD5 Checksum: | 2ed45962cad1d5d30334480bf58c9883 |
|
| /// File Name: |
winamp7513.txt |
Description:
|
Winamp Web Interface versions 7.5.13 and below suffer from buffer overflow, directory traversal, and file extension bypass vulnerabilities.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | File Size: | 5854 | | Last Modified: | Dec 11 11:32:11 2006 |
| MD5 Checksum: | 6034a6713743d88c6680e177e23daed0 |
|
| /// File Name: |
blazevideo.txt |
Description:
|
BlazeVideo HDTV Player versions 2.1 and below malformed PLF buffer overflow proof of concept exploit.
| | Author: | Greg Linares | | File Size: | 5619 | | Last Modified: | Dec 6 01:07:52 2006 |
| MD5 Checksum: | 5f17838629967b7725af835c06997f18 |
|
| /// File Name: |
thinkedit-rfi.txt |
Description:
|
ThinkEdit version 1.9.2 remote file inclusion exploit that makes use of render.php.
| | Author: | r0ut3r | | File Size: | 5605 | | Last Modified: | Dec 8 18:32:33 2006 |
| MD5 Checksum: | 21bc1dde0ace199aab870e0c235683d4 |
|
| /// File Name: |
orkut-xss.txt |
Description:
|
Google's Orkut suffers from multiple cross site scripting vulnerabilities.
| | Author: | Rajesh Sethumadhavan | | File Size: | 5098 | | Last Modified: | Dec 8 17:47:00 2006 |
| MD5 Checksum: | 9d9636427cbc206069e7fb1134dc9b4a |
|
| /// File Name: |
ISAA-2006-011.txt |
Description:
|
Improper command and information validation transmitted by Hastymail to the mail servers during the normal use of this application facilitates that an authenticated malicious user could inject arbitrary IMAP/SMTP commands into the mail servers used by Hastymail across parameters used by the webmail front-end in its communication with these mail servers. This vulnerability has been found in development version 1.5 and stable version 1.0.2.
| | Author: | Vicente Aguilera Diaz | | File Size: | 5044 | | Last Modified: | Dec 6 00:12:33 2006 |
| MD5 Checksum: | 04f55c3688204ba691e9c3cae8912fdf |
|
| /// File Name: |
coldfusionMX7.txt |
Description:
|
ColdFusion MX7 suffers from path disclosure, internal IP address disclosure, and cross site scripting vulnerabilities.
| | Author: | Brett Moore | | Homepage: | http://security-assessment.com/ | | File Size: | 4846 | | Last Modified: | Dec 11 11:34:50 2006 |
| MD5 Checksum: | 322c3712bf4de287ed212dab6fd76933 |
|
| /// File Name: |
intel-race.txt |
Description:
|
The Intel 2200BG card suffers from a race condition vulnerability. Proof of concept code included.
| | Author: | Breno Silva, Johnny Cache | | File Size: | 4440 | | Last Modified: | Dec 21 18:09:35 2006 |
| MD5 Checksum: | 6c40fbf83154c14c190a6c246566af79 |
|
| /// File Name: |
fprot-dos.txt |
Description:
|
Two vulnerabilities in F-Prot Antivirus version 4.6.6 for Unix platforms could allow a remote attacker to cause a denial of service or execute arbitrary code. Exploit included.
| | Author: | Evgeny Legerov | | Homepage: | http://gleg.net/ | | File Size: | 4284 | | Last Modified: | Dec 6 00:50:34 2006 |
| MD5 Checksum: | ae96141504b7e9a401df8956712104e1 |
|
| /// File Name: |
rateme-rfi.txt |
Description:
|
All versions of RateMe suffer from a remote file inclusion vulnerability.
| | Author: | Al7ejaz Hacker | | File Size: | 4190 | | Last Modified: | Dec 21 18:14:57 2006 |
| MD5 Checksum: | c9abc4ebacea73533118716b0fb91d77 |
|
| /// File Name: |
XD100098.txt |
Description:
|
Google's Orkut suffers a cross site scripting vulnerability in Friends.aspx.
| | Author: | Rajesh Sethumadhavan | | File Size: | 3824 | | Last Modified: | Dec 11 11:41:15 2006 |
| MD5 Checksum: | 500564613c5f12020ff40f7565f639b5 |
|
| /// File Name: |
SEC-20061220-0.txt |
Description:
|
SEC-CONSULT Security Advisory - Typo3 CMS versions 4.0.0 through 4.0.3 (along with other variants) suffer from a remote command execution flaw. Proof of concept included.
| | Author: | D. Fabian, J. Greil | | Homepage: | http://www.sec-consult.com | | File Size: | 3804 | | Last Modified: | Dec 21 19:08:31 2006 |
| MD5 Checksum: | fbc0a250ce78efccab4739344f3e35ce |
|
| /// File Name: |
dc-arbitrary.txt |
Description:
|
deV!L`z Clanportal version 1.3.6 allows arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it, leading to arbitrary code execution.
| | Author: | Tim Weber | | File Size: | 3691 | | Last Modified: | Dec 5 22:55:56 2006 |
| MD5 Checksum: | 7bcadbd2176548538534f8ccfa098a29 |
|
| /// File Name: |
osc303.txt |
Description:
|
osCommerce version 3.0a3 is susceptible to classic directory traversal and cross site scripting attacks.
| | Author: | lostmon | | Homepage: | http://lostmon.blogspot.com/ | | File Size: | 3354 | | Last Modified: | Dec 7 04:53:44 2006 |
| MD5 Checksum: | d0ee74a9e590252d178c6e30c41b75cd |
|
| /// File Name: |
ibmwebsphere-bypass.txt |
Description:
|
IBM WebSphere Host On-Demand (HOD) versions 6.0 through 9.0 suffer from a URL manipulation flaw that allows for administrative bypass. Version 10.0 may also be susceptible.
| | Author: | Dave Ferguson | | File Size: | 3336 | | Last Modified: | Dec 12 10:32:03 2006 |
| MD5 Checksum: | 8d1f77ce243e309da8c4cb17e3c8d82c |
|
| /// File Name: |
ISAA-2006-010.txt |
Description:
|
ISMail version 2.0 is vulnerable to a cross site scripting attack.
| | Author: | Vicente Aguilera Diaz | | File Size: | 3334 | | Last Modified: | Dec 6 00:10:29 2006 |
| MD5 Checksum: | 2e7ceb53b334e4eea7a4ae911a0112e9 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
