Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 06:23:59 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=2275458068&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0806-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.2275458068.1338186239.1338186239.1338186239.1%3B%2B__utmz%3D32867617.1338186239.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/67455/screen_4_0_3_password_bypass_openbsd.txt http://packetstormsecurity.org/files/67455/screen_4_0_3_password_bypass_openbsd.txt http://packetstormsecurity.org/files/67455/screen_4_0_3_password_bypass_openbsd.txt.html Tue, 06 Jan 2009 01:38:24 GMT screen versions 4.0.3 and below are vulnerable to an authentication bypass vulnerability that allows local attackers to gain system access in the case where screen was locked with a password. Tested on OpenBSD. http://packetstormsecurity.org/files/67815/0806-exploits.tgz http://packetstormsecurity.org/files/67815/0806-exploits.tgz http://packetstormsecurity.org/files/67815/0806-exploits.tgz.html Tue, 01 Jul 2008 15:40:13 GMT Packet Storm new exploits for June, 2008. http://packetstormsecurity.org/files/67791/surgemail-dos.txt http://packetstormsecurity.org/files/67791/surgemail-dos.txt http://packetstormsecurity.org/files/67791/surgemail-dos.txt.html Mon, 30 Jun 2008 15:56:25 GMT Surgemail version 39e-1 post authentication IMAP remote buffer overflow denial of service exploit. http://packetstormsecurity.org/files/67790/eshop100-sql.txt http://packetstormsecurity.org/files/67790/eshop100-sql.txt http://packetstormsecurity.org/files/67790/eshop100-sql.txt.html Mon, 30 Jun 2008 15:55:37 GMT eSHOP100 suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67789/dirlist-traverse.txt http://packetstormsecurity.org/files/67789/dirlist-traverse.txt http://packetstormsecurity.org/files/67789/dirlist-traverse.txt.html Mon, 30 Jun 2008 15:54:23 GMT dirLIST suffers from an arbitrary file download vulnerability. http://packetstormsecurity.org/files/67788/singapore-database.txt http://packetstormsecurity.org/files/67788/singapore-database.txt http://packetstormsecurity.org/files/67788/singapore-database.txt.html Mon, 30 Jun 2008 15:53:12 GMT Singapore version 0.10.1 suffers from directory traversal and database credential exposure vulnerabilities. http://packetstormsecurity.org/files/67786/acmlmboard-sql.txt http://packetstormsecurity.org/files/67786/acmlmboard-sql.txt http://packetstormsecurity.org/files/67786/acmlmboard-sql.txt.html Mon, 30 Jun 2008 15:47:29 GMT AcmlmBoard version 1.A2 suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67785/haloloop2.zip http://packetstormsecurity.org/files/67785/haloloop2.zip http://packetstormsecurity.org/files/67785/haloloop2.zip.html Sun, 29 Jun 2008 20:41:57 GMT Proof of concept exploit for Halo: Combat Evolved versions 1.07 and below which suffer from an endless loop vulnerability. http://packetstormsecurity.org/files/67783/stalker39x.zip http://packetstormsecurity.org/files/67783/stalker39x.zip http://packetstormsecurity.org/files/67783/stalker39x.zip.html Sun, 29 Jun 2008 20:38:35 GMT Proof of concept exploit for S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and below which suffer from multiple buffer overflow vulnerabilities. http://packetstormsecurity.org/files/67781/seportal-sql.txt http://packetstormsecurity.org/files/67781/seportal-sql.txt http://packetstormsecurity.org/files/67781/seportal-sql.txt.html Sun, 29 Jun 2008 20:34:07 GMT SePortal version 2.4 suffers from a remote SQL injection vulnerability in poll.php. http://packetstormsecurity.org/files/67780/phpfusionclass-sql.txt http://packetstormsecurity.org/files/67780/phpfusionclass-sql.txt http://packetstormsecurity.org/files/67780/phpfusionclass-sql.txt.html Sun, 29 Jun 2008 20:33:27 GMT The PHP-Fusion classifieds module suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67779/sebraccms-sql.txt http://packetstormsecurity.org/files/67779/sebraccms-sql.txt http://packetstormsecurity.org/files/67779/sebraccms-sql.txt.html Sun, 29 Jun 2008 20:32:19 GMT SebracCMS versions 0.4 and below suffer from multiple SQL injection vulnerabilities. http://packetstormsecurity.org/files/67778/joomlawebtv-sql.txt http://packetstormsecurity.org/files/67778/joomlawebtv-sql.txt http://packetstormsecurity.org/files/67778/joomlawebtv-sql.txt.html Sun, 29 Jun 2008 20:30:44 GMT Joomla Xe webtv component blind SQL injection exploit. http://packetstormsecurity.org/files/67777/joomlabea-sql.txt http://packetstormsecurity.org/files/67777/joomlabea-sql.txt http://packetstormsecurity.org/files/67777/joomlabea-sql.txt.html Sun, 29 Jun 2008 20:29:49 GMT The Joomla beamospetition component suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67776/obm-sql.txt http://packetstormsecurity.org/files/67776/obm-sql.txt http://packetstormsecurity.org/files/67776/obm-sql.txt.html Sun, 29 Jun 2008 20:29:09 GMT Online Booking Manager version 2.2 suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67775/joomlajabode-sql.txt http://packetstormsecurity.org/files/67775/joomlajabode-sql.txt http://packetstormsecurity.org/files/67775/joomlajabode-sql.txt.html Sun, 29 Jun 2008 20:28:26 GMT The Joomla jabode component suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/67772/otmanager-cookie.txt http://packetstormsecurity.org/files/67772/otmanager-cookie.txt http://packetstormsecurity.org/files/67772/otmanager-cookie.txt.html Sat, 28 Jun 2008 15:08:37 GMT OTManager CMS version 2.4 suffers from an insecure cookie handling vulnerability. http://packetstormsecurity.org/files/67771/aplus-cookie.txt http://packetstormsecurity.org/files/67771/aplus-cookie.txt http://packetstormsecurity.org/files/67771/aplus-cookie.txt.html Sat, 28 Jun 2008 15:07:57 GMT A+ PHP scripts News Management System suffers from an insecure cookie handling vulnerability. http://packetstormsecurity.org/files/67770/poweraward-lfi.txt http://packetstormsecurity.org/files/67770/poweraward-lfi.txt http://packetstormsecurity.org/files/67770/poweraward-lfi.txt.html Sat, 28 Jun 2008 15:05:53 GMT PowerAward version 1.1.0 RC1 suffers from local file inclusion and cross site scripting vulnerabilities. http://packetstormsecurity.org/files/67768/WebUI-dos.rar http://packetstormsecurity.org/files/67768/WebUI-dos.rar http://packetstormsecurity.org/files/67768/WebUI-dos.rar.html Sat, 28 Jun 2008 15:02:51 GMT uTorrent / BitTorrent WebUI HTTP 1.7.7/6.0.1 denial of service exploit. http://packetstormsecurity.org/files/67766/w1l3d4-sqlxss.txt http://packetstormsecurity.org/files/67766/w1l3d4-sqlxss.txt http://packetstormsecurity.org/files/67766/w1l3d4-sqlxss.txt.html Sat, 28 Jun 2008 14:52:36 GMT W1L3D4 Philboard version 1.2 suffers from blind SQL injection and cross site scripting vulnerabilities. http://packetstormsecurity.org/files/67765/otmanager-lfixss.txt http://packetstormsecurity.org/files/67765/otmanager-lfixss.txt http://packetstormsecurity.org/files/67765/otmanager-lfixss.txt.html Sat, 28 Jun 2008 14:51:23 GMT OTManager CMS version 24a suffers from local file inclusion and cross site scripting vulnerabilities. http://packetstormsecurity.org/files/67764/orca-rfi.txt http://packetstormsecurity.org/files/67764/orca-rfi.txt http://packetstormsecurity.org/files/67764/orca-rfi.txt.html Sat, 28 Jun 2008 14:49:21 GMT Orca version 2.0 suffers from a remote file inclusion vulnerability in params.php. http://packetstormsecurity.org/files/67763/cheatswebsite-sql.txt http://packetstormsecurity.org/files/67763/cheatswebsite-sql.txt http://packetstormsecurity.org/files/67763/cheatswebsite-sql.txt.html Sat, 28 Jun 2008 14:48:36 GMT Cheats Complete Website version 1.1.1 suffers from a SQL injection vulnerability. http://packetstormsecurity.org/files/67762/drinkswebsite-sql.txt http://packetstormsecurity.org/files/67762/drinkswebsite-sql.txt http://packetstormsecurity.org/files/67762/drinkswebsite-sql.txt.html Sat, 28 Jun 2008 14:47:48 GMT Drinks Complete Website version 2.1.0 suffers from a SQL injection vulnerability.