Packet Storm's last 50 added files.
Last Updated: Tue Jul  1 12:37:50 EDT 2008


[ browser_insecurity_iceberg_2008.pdf ] af684f84277d52eb31988b9ac44515b2 Understanding the Web browser threat: Examination of vulnerable online Web browser populations and the "insecurity iceberg".  
[ SSRT080039.txt ] eb33bd08e909cb2c55021114df246deb HP Security Bulletin - A potential security vulnerability has been identified with HP System Management Homepage (SMH) for Linux and Windows. This vulnerability could by exploited remotely to allow cross site scripting (XSS).  
[ 25C3-CFP.txt ] e411b12f5ef8506c1f3aacdb3d43878b The Call For Papers for the 25th Chaos Communication Congress (25C3) has been announced.  
[ SCANIT-2008-003.txt ] 2dbe63c7f433939569f3b2bbd9396d7d Wordtrans versions 1.1pre15 and below suffer from a remote command execution vulnerability.  
[ SCANIT-2008-002.txt ] ce70fc05a90c81614cd3c86db797feda Wordtrans versions 1.1pre15 and below suffer from a remote command execution vulnerability.  
[ SCANIT-2008-001.txt ] 30766d2dfe2702bf77bc2e784af435fd QNX RTOS phgrafx version 6.3.2 and 6.3.0 suffer from a privilege escalation vulnerability.  
[ usurdat.zip ] 3b8adc5e317fff936cc5da1ecdf951c0 Proof of concept denial of service exploit for SOLDNER - Secret Wars versions 33724 and below which suffer from an endless loop vulnerability.  
[ usurdat.txt ] f3e825059f7ccedff30e8299e56ab72c SOLDNER - Secret Wars versions 33724 and below suffer from an endless loop vulnerability.  
[ glsa-200807-02.txt ] 45919da25460de8eeaa81d8449ca136f Gentoo Linux Security Advisory GLSA 200807-02 - Nico Golde reported an off-by-one error within the read_client() function in the webhttpd.c file, leading to a stack-based buffer overflow. Stefan Cornelius (Secunia Research) reported a boundary error within the same function, also leading to a stack-based buffer overflow. Both vulnerabilities require that the HTTP Control interface is enabled. Versions less than 3.2.10.1 are affected.  
[ glsa-200807-01.txt ] 9754f003ee383327a4cf504dfc48d95e Gentoo Linux Security Advisory GLSA 200807-01 - Multiple integer overflows may allow for Denial of Service. Versions less than 2.4.4-r13 are affected.  
[ blogparticle-traverse.txt ] b2b27405d6772b357b942e854231542e Blog Particle version 8.0 suffers from directory traversal and database credential disclosure vulnerabilities.  
[ hbr-rfi.txt ] 059950a053c937cf608ba8fa88fb87c7 HIOX Banner Rotator (HBR) version 1.3 suffers from a remote file inclusion vulnerability.  
[ 0806-exploits.tgz ] b8541128010b04328070aff54cf865f4 Packet Storm new exploits for June, 2008.  
[ mambongal-sql.txt ] 518ab12f168cd87e8d1f56f8f07ae494 The Mambo n-gallery component suffers from multiple SQL injection vulnerabilities.  
[ psys070-sql.txt ] 7753d7d24d70b5cdbe4ff97bd90822cf pSys version 0.7.0 suffers from a remote SQL injection vulnerability in chatbox.php.  
[ pivot-disclosure.txt ] 3aa95a0656fbb05e1de96366a7bc772d Pivot version 1.40.5 Dreamwind load_template() credential disclosure exploit.  
[ USN-617-2.txt ] 1a96557d0ecb7fc857c3b1519608d098 Ubuntu Security Notice 617-2 - USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. Samba developers discovered that nmbd could be made to overrun a buffer during the processing of GETDC logon server requests. When samba is configured as a Primary or Backup Domain Controller, a remote attacker could send malicious logon requests and possibly cause a denial of service. Alin Rad Pop of Secunia Research discovered that Samba did not properly perform bounds checking when parsing SMB replies. A remote attacker could send crafted SMB packets and execute arbitrary code.  
[ rcm-sql.txt ] 4d8731d224689d8375fccf12d82edd5a RCM Revision Web Development suffers from a remote SQL injection vulnerability in products.php.  
[ barenuked-admin.txt ] 5ec47feac834cbac9413af2b028e7cd6 BareNuked CMS version 1.1.0 arbitrary add administrator exploit.  
[ faname10-xss.txt ] a91182cee88d64312eaa70e37f746fd7 Fa Name version 1.0 suffers from multiple cross site scripting vulnerabilities.  
[ faname10-sql.txt ] 479d647a0d9376efad4a924222e49f69 Fa Name version 1.0 suffers from a remote SQL injection vulnerability.  
[ rssagg-sql.txt ] 85402114964722c1beb4c841d641efa8 RSS-aggregator version 1.0 suffers from direct administrative access and SQL injection vulnerabilities.  
[ lul-busybox.c ] 0779070e48e6cb3aeab5c96d2bacde47 BusyBox local format string exploit.  
[ openbsdanim-local.txt ] 0aaa57871ef67c2fdf9114a9133eb7c6 Local root animated,.. yes animated, exploit for OpenBSD 4.0 that takes advantage of an old vga vulnerability.  
[ ashop-sql.txt ] 0b77fa10fe8a2227dc7f73298d9ed400 AShop Deluxe version 4.x remote SQL injection exploit that takes advantage of catalogue.php.  
[ mybloggie-sql.txt ] e9b34428bf379bf84fc15a1fc314f32b myBloggie version 2.1.6 suffers from multiple remote SQL injection vulnerability.  
[ catviz-sql.txt ] cf439a30e0259c6d86deff2bc919a096 Catviz version 0.4.0 beta1 suffers from a SQL injection vulnerability.  
[ surgemail-dos.txt ] be876b1cc941d302f35ee5da0c30d612 Surgemail version 39e-1 post authentication IMAP remote buffer overflow denial of service exploit.  
[ eshop100-sql.txt ] 642f81b474b9474928e769d5d24150de eSHOP100 suffers from a remote SQL injection vulnerability.  
[ dirlist-traverse.txt ] 50c3cc3bca2d5bef810b1ef90d522956 dirLIST suffers from an arbitrary file download vulnerability.  
[ singapore-database.txt ] 00eceb6b1d9f12b280554992b7d92927 Singapore version 0.10.1 suffers from directory traversal and database credential exposure vulnerabilities.  
[ pktanon-1.2.0-dev.tar.gz ] 6e62d3f5495216ac5d24dd82b3025314 PKtAnon performs network trace anonymization. It is highly configurable and uses anonymization profiles. Anonymization profiles allow for mapping of arbitrary anonymization primitives to protocol attributes, thus providing high flexibility and easy usability. A huge number of anonymization primitives and network protocols are supported and ready to use for online and offline anonymization.  
[ acmlmboard-sql.txt ] 773787955947be4c56fe35fa0cdf29e0 AcmlmBoard version 1.A2 suffers from a remote SQL injection vulnerability.  
[ haloloop2.zip ] fadea90eced43aed0c6e0f6a481c9d5a Proof of concept exploit for Halo: Combat Evolved versions 1.07 and below which suffer from an endless loop vulnerability.  
[ haloloop2.txt ] 2342eabb31216ae3717a8fae1e0fd88c Halo: Combat Evolved versions 1.07 and below suffer from an endless loop vulnerability.  
[ stalker39x.zip ] aa19aaaee16e78fe36cffc1da46c2748 Proof of concept exploit for S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and below which suffer from multiple buffer overflow vulnerabilities.  
[ stalker39x.txt ] 8748175c36816983ed9b88629e1d66cd S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and below suffer from multiple buffer overflow vulnerabilities.  
[ seportal-sql.txt ] 717c3293a35186d12df542367e48c32b SePortal version 2.4 suffers from a remote SQL injection vulnerability in poll.php.  
[ phpfusionclass-sql.txt ] a3f38413ec0cbbe7ed2d38c0a7d6a99e The PHP-Fusion classifieds module suffers from a remote SQL injection vulnerability.  
[ sebraccms-sql.txt ] 10f686df5300fbcfd99f9233d456f357 SebracCMS versions 0.4 and below suffer from multiple SQL injection vulnerabilities.  
[ joomlawebtv-sql.txt ] 08932ce3fcc95e0686763e4acd36f91b Joomla Xe webtv component blind SQL injection exploit.  
[ joomlabea-sql.txt ] 986f117c65f7fbdcb0f50a0fb11da920 The Joomla beamospetition component suffers from a remote SQL injection vulnerability.  
[ obm-sql.txt ] 0d97b72637844ae1ecff587d078a4f7c Online Booking Manager version 2.2 suffers from a remote SQL injection vulnerability.  
[ joomlajabode-sql.txt ] f07a14bb82cd1a7e7872d4a04018d057 The Joomla jabode component suffers from a remote SQL injection vulnerability.  
[ SSRT080063-2.txt ] cb574cc01a166d5cb95cca70387a9dad HP Security Bulletin - A potential security vulnerability has been identified with HP-UX running Apache with PHP. This vulnerability could be exploited remotely to execute arbitrary code.  
[ SSRT080075.txt ] 6062acd3e10bdd7f313d85a01264ff04 HP Security Bulletin - A potential security vulnerabilities has been identified with HP-UX running HP CIFS Server (Samba). The vulnerabilities could be exploited remotely to execute arbitrary code.  
[ otmanager-cookie.txt ] 8be7ba9a4d9cd7a3cf2bd8881eef13fd OTManager CMS version 2.4 suffers from an insecure cookie handling vulnerability.  
[ aplus-cookie.txt ] bb54ef13386580558883b1131de856b6 A+ PHP scripts News Management System suffers from an insecure cookie handling vulnerability.  
[ poweraward-lfi.txt ] 9305f5fb108154490012aba4cc57fc8f PowerAward version 1.1.0 RC1 suffers from local file inclusion and cross site scripting vulnerabilities.  
[ bacom2008-cfp.txt ] 152571f585e0207c5f31e4dd35351f9e Call for the papers for the first annual BA-Con applied technical security conference has been announced. It will be held in Buenos Aires on September 30th and October 1st, 2008.