Kryn.cms 0.9 Cross Site Scripting

------------------------------------------------------------------------ Software................Kryn.cms 0.9 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.kryn.org/ Discovery Date..........5/19/2011 Tested...

Fedora 13 : cgit-0.9-1.fc13 (2011-2815)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

Fedora 15 : cgit-0.9-1.fc15 (2011-2790)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

Apache Shiro Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2010-3863: Apache Shiro information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Shiro 1.0.0-incubating The unsupported JSecurity 0.9.x versions are also affected Description:...

sasp cms (fckeditor) shell upload Vulnerability

Exploit for php platform in category web applications =============================================== sasp cms fckeditor shell upload Vulnerability =============================================== Author: ashiyane digital security team Version: 0.9 Category:: upload bug discovered by:ramin bazghan...

Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vuln

Exploit for unknown platform in category web applications ========================================================================== Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vulnerabilities ========================================================================== Vulnerable: Th...

pL-PHP Beta 0.9 Cross Site Scripting

======================================================================================== | Title : pL-PHP beta 0.9 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found ...

Sunbird 0.9 Array Overrun

Sunbird 0.9 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-199 Risk: High Remote: Yes Affected Software: - Sunbird 0.9 NOTE: Prior versions may also be affected. Original URL:...

Sunbird 0.9 Array Overrun (code execution) 0day

Exploit for unknown platform in category remote exploits =============================================== Sunbird 0.9 Array Overrun code execution 0day =============================================== Title: Sunbird 0.9 Array Overrun code execution 0day CVE-ID: 2009-0689 OSVDB-ID: Author: Maksymili...

"Sunbird 0.9 Array Overrun (code execution) 0day"

No description provided by source. full disclosure: http://seclists.org/fulldisclosure/2009/Dec/253 Sunbird 0.9 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-199 Risk: High...

SAP Player 0.9 - .pla Universal Local Buffer Overflow (SEH)

SAP Player 0.9 - .pla Universal Local Buffer Overflow SEH !/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ;...

SAP Player 0.9 (.pla) Universal Local Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ; windows/shell/reversetcp - 617 byt...

SAP Player 0.9 Universal Buffer Overflow

!/usr/bin/perl print qq Iranian Pentesters Home Www.Pentesters.Ir PLATEN - H.jafari - SAP player 0.9 .m3u Universal Local BoF ExploitSEH http://www.sorinara.com/sap/sap09.exe bug found & exploited by: PLATEN E-mail && blog: hjafari.blogspot.com platen.secureatgmaildotcom Greetings: Cru3l.b0y,...

CVE-2009-2568

Stack-based buffer overflow in Sorinara Streaming Audio Player SAP 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist .m3u file...

OpenSSL dtls1_retrieve_buffered_fragment()函数握手消息拒绝服务漏洞

BUGTRAQ ID: 35417 CVECAN ID: CVE-2009-1387 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL在接收到带有非预期序列号的握手消息时会将其传送给dtls1processoutofseqmessage函数。如果序列号低于预期值，这个函数会丢弃数据；如果为之后的消息，函数会缓冲数据。在丢弃数据时，消息碎片长度保持为0，说明没有缓冲任何数据。由于检查长度所用的错误if条件，有时会缓冲没有数据但长度为丢弃消息长度的碎片，之后在进行处理的时候会导致总线错误。 OpenSSL 0.9.x...

Sorinara Streaming Audio Player Stack Overflow Vulnerability

Sorinara Streaming Audio Player is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sorinara Streaming Audio Player 0.9 (.m3u) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Streaming Audio Player 0.9 .M3U File Local Stack Core Exploit Credit : http://www.milw0rm.com/exploits/8617 cyber-zone By Stack Tested On WinSp2 En / FR use strict; use warnings; my $header=...

Sorinara Streaming Audio Player 0.9 (.m3u) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK Thanx To All Friends : Hussin X , Jiko , Stack , ZoRLu , ThE g0bL!N , r1z , Mag!c ompo , SimO-s0fT ... All MoroCCaN HaCkerS FIGUIG OwnZ !!! Streaming Audio Player 0.9 .M3U File Local Buffer Overflow PoC Olly...

CVE-2008-6491

The CVE-2008-6491 entry affects PHPGKit 0.9, where the PHP remote file inclusion flaw resides in the connexion.php module. An attacker can cause arbitrary PHP code execution by supplying a URL in the DOCUMENT_ROOT parameter, enabling remote code execution via a crafted request. This vulnerability...

CVE-2008-6014

The CVE-2008-6014 entry concerns the Rianxosencabos CMS 0.9 SQL injection in scripts/links.php via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Impact and exploitability are consistent with a high-severity vulnerability (CVSS base score 7.5, network vector, no au...