Wah kya site hai!wah kya site hai!

Evolving To WordPress.com

WordPress…AMAZING…blogspot…eh,what?

Dude!WordPress.com is way too awesome than blogger.com! Here, there are plenty of things that you can do, and much much more page-space than blogger! Excuse me for putting exclamations, but its hell lotta exciting! In every page blogger has just two column design, and so much less space to add stuff. (No, the excitement didn’t end! I just that thought that it might be annoying to see “!” again and again!;-).) Though I’ve just created my account, I can hardly wait to start blogging! The first job is to export all my blogger stuff here. Blogger is just obsolete. Happy Reading!;-)

~ by punjrashtra on July 8, 2008.

Posted in Uncategorized

Packet Storm Security Exploits

php530-bypass.txt
PHP version 5.3.0 suffers from a pdflib extension open_basedir bypass vulnerability.
linux-pipe.txt
Proof of concept local privilege escalation exploit for the Linux kernel pipe.c vulnerability.
ssl-mitm.c
This is a proof of concept exploit for the man-in-the-middle vulnerability related to SSL/TLS.
CORE-2009-0912.txt
Core Security Technologies Advisory - Blender embeds a python interpreter to extend its functionality. Blender .blend project files can be modified to execute arbitrary commands without user intervention by design. An attacker can take full control of the machine where Blender is installed by sending a specially crafted .blend file and enticing the user to o […]
ebfe.cpp
Remote buffer overflow exploit for the Serv-U web client version 9.0.0.5.
prdelka-vs-APPLE-ptracepanic.c
Mac OS X versions 10.5.6 and 10.5.7 ptrace() mutex handling denial of service exploit. This code should be run in a loop and due to problems with mutex handling in ptrace a denial of service can occur when a destroyed mutex is attempted to be interlocked by the OSX kernel giving rise to a race condition. You may need to run this code multiple times.
endonesia-lfi.txt
Endonesia CMS version 8.4 suffers from a local file inclusion vulnerability.
Portili-V1.14.txt
The Portili Personal and Team Wiki versions 1.14 and below suffer from cross site scripting, shell upload, and information and password disclosure vulnerabilities.
ecourier-xss.txt
The e-Courier CMS tracking site suffers from a cross site scripting vulnerability.
xfw-sql.txt
Xerox Fiery Webtools suffers from a remote SQL injection vulnerability in /wt3/summary.php.

Hmm…