Perl Safe模块对象引用绕过安全限制漏洞

BUGTRAQ ID: 40302 CVECAN ID: CVE-2010-1168,CVE-2010-1974 Perl是一种免费且功能强大的编程语言。 Perl中所使用的Safe模块没有正确地对经过隐式bless处理的对象限制DESTROY和AUTOLOAD等方式的代码，在访问或释放这些对象时 Safe可能未加限制的执行这些方式。在Safe隔离中所执行的特制Perl脚本可以利用这个漏洞绕过预期的Safe模块限制。 Perl 5.12.1 厂商补丁： Larry Wall ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Cpanel Image Manager Local File Inclusion

Cpanel Image Manager Local File Include Exploit Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Email : [email protected] Version Of App : All Versions Tested on : Cpanel 11 Date : 2010-02-14 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= How To Exploit :...

SIMM Management System Local File Inclusion

=================================================================================================== o SIMM Management System SMS Local File Inclusion Vulnerability Software : SIMM Management System SMS version 2 Vendor : http://anodyne-productions.com/index.php/sms/index Author : AntiSecurity NoG...

K9 Kreativity Design - pages.php SQL Injection

K9 Kreativity Design - pages.php SQL Injection ========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By...

K9 Kreativity Design (pages.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ K9 Kreativity Design pages.php SQL Injection Vulnerability ============================================================ + K9 Kreativity Design pages.php SQL Injection Vulnerability +...

Motorola Surfboard Cable Modem - Directory Traversal

Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the /etc/passwd file from the modem:...

K9 Kreativity Design - 'pages.php' SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

Solaris 9 (sparc) : 113434-38

SunOS 5.9: /usr/snadm/lib Library and Diff. Date this patch was last updated by Sun : Jun/02/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 113999-06

SunOS 5.9x86: devfsadm Patch. Date this patch was last updated by Sun : Jun/02/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SIMM Management System (SMS) - Local File Inclusion

SIMM Management System SMS - Local File Inclusion =================================================================================================== o SIMM Management System SMS Local File Inclusion Vulnerability Software : SIMM Management System SMS version 2 Vendor :...

Adobe Download Manager getPlus ActiveX Control Buffer Overflow (APSB10-02; CVE-2009-3958)

Adobe Download Manager DLM is a small application that is used to deliver Adobe products over the Internet. It contains licensed technology from NOS Microsystems called "getPlus" to support the transfer of information between Adobe.com and a connected user. A stack buffer overflow vulnerability...

Internet Explorer <= 8 & Mozilla Firefox <= 3.6.3 Crash Exploit

=============================================================== Internet Explorer = 8 & Mozilla Firefox = 3.6.3 Crash Exploit =============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 ...

CVE-2010-1920

creationtimestamp| type| source ---|---|--- 2010-05-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12486...

Internet Explorer <= 8 & Mozilla Firefox <= 3.6.3 Crash Exploit

Exploit for php platform in category dos / poc =============================================================== Internet Explorer Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

MJB Data (gallery.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== MJB Data gallery.php Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC

Exploit for windows platform in category dos / poc =================================================================== MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC =================================================================== 'Magneto Software Net Resource ActiveX...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE...

NetHoteles TN 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== NetHoteles TN 2.0 Auth Bypass SQL Injection Vulnerability =========================================================== @Title: NetHoteles TN 2.0 Auth Bypass SQL Injection Vulnerability...

MX Simulator Server 2010-02-06 Buffer Overflow

/ MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC This PoC will executes the calc.exe software on the remote system. The bug was discovered by Luigi Auriemma www.aluigi.org Copyright 2010 Salvatore Fresta aka Drosophila This program is free software; you can redistribute it and/or modif...

Solaris 9 (x86) : 117144-02

SunOS 5.9x86: xntpd Patch. Date this patch was last updated by Sun : Mar/09/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...