Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 06:09:13 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1153236719&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0709-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1153236719.1338185353.1338185353.1338185353.1%3B%2B__utmz%3D32867617.1338185353.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/59701/0709-exploits.tgz http://packetstormsecurity.org/files/59701/0709-exploits.tgz http://packetstormsecurity.org/files/59701/0709-exploits.tgz.html Thu, 13 Dec 2007 18:14:43 GMT Packet Storm new exploits for September, 2007. http://packetstormsecurity.org/files/59653/Vulnerability_Axis_2100_research.pdf http://packetstormsecurity.org/files/59653/Vulnerability_Axis_2100_research.pdf http://packetstormsecurity.org/files/59653/Vulnerability_Axis_2100_research.pdf.html Wed, 31 Oct 2007 11:45:25 GMT Whitepaper discussing multiple vulnerabilities discovered against the AXIS 2100 IP camera system. http://packetstormsecurity.org/files/59691/netkamp-sql.txt http://packetstormsecurity.org/files/59691/netkamp-sql.txt http://packetstormsecurity.org/files/59691/netkamp-sql.txt.html Sun, 30 Sep 2007 06:33:04 GMT Netkamp Emlak Scripti is susceptible to a SQL injection vulnerability. http://packetstormsecurity.org/files/59690/ohesa-sql.txt http://packetstormsecurity.org/files/59690/ohesa-sql.txt http://packetstormsecurity.org/files/59690/ohesa-sql.txt.html Sun, 30 Sep 2007 06:32:12 GMT Ohesa Emlak Portal is susceptible to a SQL injection vulnerability. http://packetstormsecurity.org/files/59687/gmailsteal_remote.scpt.txt http://packetstormsecurity.org/files/59687/gmailsteal_remote.scpt.txt http://packetstormsecurity.org/files/59687/gmailsteal_remote.scpt.txt.html Sun, 30 Sep 2007 06:26:43 GMT This script can be used to steal G-Mail's keychained password by injecting javascript into Safari. When executed it opens G-Mail's login page, reads the saved password and sends it to a logging server by creating an hidden iframe into G-Mail's page. http://packetstormsecurity.org/files/59686/gmailsteal_local.scpt.txt http://packetstormsecurity.org/files/59686/gmailsteal_local.scpt.txt http://packetstormsecurity.org/files/59686/gmailsteal_local.scpt.txt.html Sun, 30 Sep 2007 06:24:52 GMT This script can be used to steal G-Mail's keychained password by injecting javascript into Safari. When executed it opens G-Mail's login page, reads the saved password and prompts it into an alert box. http://packetstormsecurity.org/files/59685/tor01216-rewrite.txt http://packetstormsecurity.org/files/59685/tor01216-rewrite.txt http://packetstormsecurity.org/files/59685/tor01216-rewrite.txt.html Sun, 30 Sep 2007 06:16:55 GMT Tor versions below 0.1.2.16 ControlPort remote rewrite exploit. http://packetstormsecurity.org/files/59684/mxbb233-rfi.txt http://packetstormsecurity.org/files/59684/mxbb233-rfi.txt http://packetstormsecurity.org/files/59684/mxbb233-rfi.txt.html Sun, 30 Sep 2007 06:15:03 GMT mxBB module mx_glance version 2.3.3 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/59683/mambads-sql.txt http://packetstormsecurity.org/files/59683/mambads-sql.txt http://packetstormsecurity.org/files/59683/mambads-sql.txt.html Sun, 30 Sep 2007 06:13:34 GMT Mambo component Mambads versions 1.5 and below suffer from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/59682/mdpro1076-sql.txt http://packetstormsecurity.org/files/59682/mdpro1076-sql.txt http://packetstormsecurity.org/files/59682/mdpro1076-sql.txt.html Sun, 30 Sep 2007 06:12:21 GMT MDPro version 1.0.76 remote SQL injection exploit. http://packetstormsecurity.org/files/59681/zomplog381-upload.txt http://packetstormsecurity.org/files/59681/zomplog381-upload.txt http://packetstormsecurity.org/files/59681/zomplog381-upload.txt.html Sun, 30 Sep 2007 06:10:15 GMT Zomplog versions 3.8.1 and below suffer form an arbitrary file upload vulnerability. http://packetstormsecurity.org/files/59680/pmm-rfi.txt http://packetstormsecurity.org/files/59680/pmm-rfi.txt http://packetstormsecurity.org/files/59680/pmm-rfi.txt.html Sun, 30 Sep 2007 06:08:51 GMT Public Media Manager versions 1.3 and below suffer from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/59679/phfito-rfi.txt http://packetstormsecurity.org/files/59679/phfito-rfi.txt http://packetstormsecurity.org/files/59679/phfito-rfi.txt.html Sun, 30 Sep 2007 06:07:42 GMT PhFiTo version 1.3.0 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/59651/integra-rfi.txt http://packetstormsecurity.org/files/59651/integra-rfi.txt http://packetstormsecurity.org/files/59651/integra-rfi.txt.html Fri, 28 Sep 2007 01:22:35 GMT IntegraMOD Nederland version 1.4.2 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/59650/chupix-rfi.txt http://packetstormsecurity.org/files/59650/chupix-rfi.txt http://packetstormsecurity.org/files/59650/chupix-rfi.txt.html Fri, 28 Sep 2007 01:21:44 GMT Chupix CMS version 0.2.3 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/59649/lustigcms-rfi.txt http://packetstormsecurity.org/files/59649/lustigcms-rfi.txt http://packetstormsecurity.org/files/59649/lustigcms-rfi.txt.html Fri, 28 Sep 2007 01:20:46 GMT lustig.cms BETA version 2.5 suffers from a remote file inclusion vulnerability in forum.php. http://packetstormsecurity.org/files/59648/linux-syscall.txt http://packetstormsecurity.org/files/59648/linux-syscall.txt http://packetstormsecurity.org/files/59648/linux-syscall.txt.html Fri, 28 Sep 2007 01:19:06 GMT Local root exploit for the x86_64 Linux kernel ia32syscall emulation bug. http://packetstormsecurity.org/files/59647/promise-root.txt http://packetstormsecurity.org/files/59647/promise-root.txt http://packetstormsecurity.org/files/59647/promise-root.txt.html Fri, 28 Sep 2007 01:15:51 GMT The Promise NAS NS4300N web GUI allows an administrative user to change the root password. http://packetstormsecurity.org/files/59644/waraxe-2007-SA057.txt http://packetstormsecurity.org/files/59644/waraxe-2007-SA057.txt http://packetstormsecurity.org/files/59644/waraxe-2007-SA057.txt.html Fri, 28 Sep 2007 01:07:45 GMT SiteX CMS is susceptible to an unauthorized file upload vulnerability. http://packetstormsecurity.org/files/59627/novus-sql.txt http://packetstormsecurity.org/files/59627/novus-sql.txt http://packetstormsecurity.org/files/59627/novus-sql.txt.html Thu, 27 Sep 2007 02:42:59 GMT Novus version 1.0 suffers from a remote SQL injection vulnerability in notas.asp. http://packetstormsecurity.org/files/59626/softbiz-sql.txt http://packetstormsecurity.org/files/59626/softbiz-sql.txt http://packetstormsecurity.org/files/59626/softbiz-sql.txt.html Thu, 27 Sep 2007 02:41:52 GMT Softbiz Classifieds PLUS suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/59625/fa113-rfi.tt http://packetstormsecurity.org/files/59625/fa113-rfi.tt http://packetstormsecurity.org/files/59625/fa113-rfi.tt.html Thu, 27 Sep 2007 02:40:58 GMT FrontAccounting version 1.13 suffers from remote file inclusion vulnerabilities. http://packetstormsecurity.org/files/59604/CORE-2007-0817.txt http://packetstormsecurity.org/files/59604/CORE-2007-0817.txt http://packetstormsecurity.org/files/59604/Core-Security-Technologies-Advisory-2007.0817.html Wed, 26 Sep 2007 02:07:53 GMT Core Security Technologies Advisory - Remote command execution, HTML and JavaScript injection vulnerabilities in AOL's Instant Messaging software. Versions 6.1, 6.2, Pro, and Lite are affected. http://packetstormsecurity.org/files/59603/simpnews24103-fdisclose.txt http://packetstormsecurity.org/files/59603/simpnews24103-fdisclose.txt http://packetstormsecurity.org/files/59603/simpnews24103-fdisclose.txt.html Wed, 26 Sep 2007 02:04:23 GMT SimpNews version 2.41.03 suffers from a local file inclusion vulnerability. http://packetstormsecurity.org/files/59602/simpgb14602-infodis.txt http://packetstormsecurity.org/files/59602/simpgb14602-infodis.txt http://packetstormsecurity.org/files/59602/simpgb14602-infodis.txt.html Wed, 26 Sep 2007 02:03:21 GMT SimpGB version 1.46.02 suffers from an information disclosure vulnerability.