ASPPortal Free Version - Topic_Id SQL Injection

ASPPortal Free Version - TopicId SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==--...

Kaspersky kl1.sys驱动本地栈溢出漏洞

CVECAN ID: CVE-2008-1518 Kaspersky Internet Security套件是一套完整的解决方案，用于保护计算机抵御几乎所有来自互联网的主要的威胁。 Internet Security及其他Kaspersky产品中所发布的kl1.sys内核驱动在处理IOCTL 0x800520e8时没有对向swprintf函数所传送的数据执行边界检查，在这种情况下目标缓冲区为2,000单元宽字符数据，因此如果源缓冲区超过了2000字符的话，就可以触发栈溢出，导致执行任意内核态指令。 Kaspersky Labs Kaspersky Antivirus 7.0...

CVE-2008-1518

CVE-2008-1518 describes a local privilege escalation in Kaspersky Lab products. The vulnerable component is the kernel driver kl1.sys used by Kaspersky Anti-Virus 6.0/7.0 and Internet Security 6.0/7.0. The issue is a stack-based buffer overflow triggered in the handling of IOCTL 0x800520e8 due to...

CVE-2008-1518: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call...

Kaspersky Multiple Products kl1.sys Driver Local Overflow

The version of the Kaspersky product installed on the remote host contains a stack-based overflow in its 'kl1.sys' kernel driver involving its handling of IOCTL 0x800520e8. A local attacker may be able to leverage this issue to gain complete control of the affected system. C Tenable Network...

bpblog-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 AND SELECT Count FROM tblauthor = 0...

BP Blog 6.0 - id Blind SQL Injection

BP Blog 6.0 - id Blind SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 A...

BP Blog 6.0 - 'id' Blind SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 AND SELECT Count FROM tblauthor = 0...

StanWeb.CMS (default.asp id) Remote SQL Injection Exploit

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

StanWeb.CMS (default.asp id) Remote SQL Injection Exploit

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS...

StanWeb.CMS - SQL Injection

StanWeb.CMS - SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS +...

StanWeb.CMS - SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

CVE-2008-1931

The CVE-2008-1931 issue affects Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys on Windows Vista. A crafted IOCTL request lets a local user create, write, and read registry keys, indicating a local privilege escalation vulnerability. The root cause is improper handling of IOCTLs by t...

CVE-2008-1932

CVE-2008-1932 affects Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys on Windows Vista. The root cause is an integer overflow triggered by a crafted IOCTL request, enabling a local user to execute arbitrary code . The vulnerability is described as a local privilege escalation in mult...

CVE-2008-1931: Undefined Security Weakness

Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request...

CVE-2008-1932: Undefined Security Weakness

Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request...

Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- +...

classifiedscaffe-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

CVE-2008-1625: Undefined Security Weakness

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests...