Absolute File Send 1.0 - Remote Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script http://www.xigla.com/afilesend/demo.htm Greetz : Allah ,...

CVE-2008-3646

The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...

freebsd/x86 - connect back.send.exit /etc/passwd 112 bytes

freebsd/x86 connect back.send.exit /etc/passwd 112 bytes. Shellcode exploit for freebsdx86 platform CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 connect back.send.exit /etc/passwd 112 bytes This is the FreeBSD version of 0in's shellcode http://milw0rm.com/shellcode/6263 really...

linux/x86 - connect back.send.exit /etc/shadow 155 bytes

linux/x86 connect back.send.exit /etc/shadow 155 bytes. Shellcode exploit for linx86 platform ; CoDed by 0in ; Dark-Coders Group Productions ; Linux x86 connect back&send&exit /etc/shadow 155 byte shellcode ; www.dark-coders.pl nc -v -l -p 8192 ; 2nd console ;Connection from 127.0.0.1:48820...

linux/x86 connect back.send.exit /etc/shadow 155 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 connect back.send.exit /etc/shadow 155 bytes ====================================================== ; CoDed by 0in ; Dark-Coders Group Productions ; Linux x86 connect back&send&ex...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Send-A-Card srsendcard extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3028

Multiple cross-site scripting XSS vulnerabilities in the Send-A-Card srsendcard extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3028

CVE-2008-3028 affects the TYPO3 Send-A-Card extension (sr_sendcard) 2.2.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The documents identify TYPO3 extension as the affected ...

CVE-2008-3028

Multiple cross-site scripting XSS vulnerabilities in the Send-A-Card srsendcard extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== WebCalendar 1.0.4 includedir Remote File Inclusion Vulnerability ================================================================== WebCalendar v1.0.4 Remote F?le Include...

GreaseKit and Creammonkey allows execution of userscript functions

Overview GreaseKit and Creammonkey contains a vulnerability that can be exploited to execute functions for userscripts. GreaseKit and Creammonkey are plugins that enable user scripting to Safari and other Apple Webkit applications, and they provide APIs callable only from userscripts. GreaseKit a...

PT-2008-3409 · Xine · Xine-Lib

Name of the Vulnerable Software and Affected Versions: xine-lib versions 1.1.12 and earlier Description: The issue is a stack-based buffer overflow in the demux nsf send chunk function, located in src/demuxers/demux nsf.c. This allows remote attackers to cause a denial of service, potentially...

PT-2008-3244 · Autonomy · Worksite Web

Name of the Vulnerable Software and Affected Versions: WorkSite Web versions 8.2 before SP1 P2 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large number of SendNrlLink directives. This results in opening a separate window for...

Buffer overflow in CIFS VFS

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function...

DEBIAN-CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

CVE-2007-6173

Cross-site scripting XSS vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained...

liferay-xss.txt

Vendor Site: Liferay.net Version affected: Liferay Enterprise Portal 4.3.1 Demo:http://www.liferay.net/c/portal/login?tabs1=forgot-password Class: Input Validation Error Overview: Liferay fails to sufficiently sanitize user-supplied input data in "email address" text box by pressing the "Send New...

GLSA-200709-18 : Bugzilla: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200709-18 Bugzilla: Multiple vulnerabilities Masahiro Yamada found that from the 2.17.1 version, Bugzilla does not properly sanitize the content of the 'buildid' parameter when filing bugs CVE-2007-4543. The next two vulnerabiliti...

sharelor-xss.txt

Sharelor file sender Cross site scripting ========================================= POST variable : http://www.fileflasher.com:80/contact.php?action=send with line below from="alert1248191921%3B malibu.r...

CVE-2007-4220

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. dot dot in a Send request, probably related to the 1 Send and 2 Exchange services...