|
|
[ Message Precedent sur la mailing][ Message Suivant sur la mailing][ Precedent dans le fil][ Prochain dans le fil][ Index par Date][ Index par fil]
Re: [Full-disclosure] LFI Bug and other
It sure as hell was not meant to be a place where children post links
to sites with live LFI issues.
On Sat, Feb 19, 2011 at 4:58 AM, Friedrich Hausberger
<fhausberger@xxxxxxxxx> wrote:
> Is full disclosure a security mailing list, where I can find hacking
> stuff or a magazine about
> chat show? I hate pornography also, but this is the wrong way to publish.
>
> Here you have a LFI vuln I found by accident:
>
> link://[click].
> Feel free to download the whole Debian 4.0 Distribution.
>
> Most provider do not use jails/chroot or similar for their multi hosted
> webserver. Nearly all providers are hackable under 3 days.
>
> Regards
>
> FHausberger
>
>>
>> Message: 17
>> Date: Sat, 19 Feb 2011 01:08:56 -0500
>> From: Hack Talk<hacktalkblog@xxxxxxxxx>
>> Subject: [Full-disclosure] University of Central Florida Multiple LFI
>> To: full-disclosure@xxxxxxxxxxxxxxxxx
>> Message-ID:
>> <AANLkTi=oyDpNL6Jgu8Ms=btLaZdjUkvyhFxXLH8vDjj0@xxxxxxxxxxxxxx>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> Found these and thought I'd share:
>>
>> -==================-
>> link://[click]
>> link://[click]
>> -==================-
>> Let me know if you do anything fun with 'em
>>
>> Luis Santana - Security+
>> Administrator - link://[click]
>> HackTalk Security - Security From The Underground
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: link://[click]
>>
>> ------------------------------
>>
>> Message: 18
>> Date: Sat, 19 Feb 2011 16:34:21 +0530
>> From: Madhur Ahuja<ahuja.madhur@xxxxxxxxx>
>> Subject: Re: [Full-disclosure] University of Central Florida Multiple
>> LFI
>> To: Hack Talk<hacktalkblog@xxxxxxxxx>
>> Cc: full-disclosure@xxxxxxxxxxxxxxxxx
>> Message-ID:
>> <AANLkTimd5F1Kgw1uCO_UGgX3mVUiMuU9jaisp6K=SM-K@xxxxxxxxxxxxxx>
>> Content-Type: text/plain; charset="utf-8"
>>
>> link://[click]
>>
>> On Sat, Feb 19, 2011 at 11:38 AM, Hack Talk<hacktalkblog@xxxxxxxxx> wrote:
>>
>>> Found these and thought I'd share:
>>>
>>> -==================-
>>>
>>> link://[click]
>>>
>>> link://[click]
>>> -==================-
>>> Let me know if you do anything fun with 'em
>>>
>>> Luis Santana - Security+
>>> Administrator - link://[click]
>>> HackTalk Security - Security From The Underground
>>>
>>>
>>>
>>> Full-Disclosure - We believe in it.
>>> Charter: link://[click]
>>> Hosted and sponsored by Secunia - link://[click]
>>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: link://[click]
>>
>> ------------------------------
>>
>>
>> Full-Disclosure - We believe in it.
>> Charter: link://[click]
>> Hosted and sponsored by Secunia - link://[click]
>>
>> End of Full-Disclosure Digest, Vol 72, Issue 44
>> ***********************************************
>
>
> Full-Disclosure - We believe in it.
> Charter: link://[click]
> Hosted and sponsored by Secunia - link://[click]
>
Full-Disclosure - We believe in it.
Charter: link://[click]
Hosted and sponsored by Secunia - link://[click]
Archives de la liste de diffusion Secunia
Archives de la liste de diffusion Full Disclosure
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
