Constructr CMS 3.03 - Arbitrary File Upload

!/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and DoMinO use strict; use warnings; use...

Unfixed Script Insertion vulnerability at dfoto.datateknologer.se

Security researcher istehem, has submitted on 22/03/2011 a Script Insertion vulnerability affecting dfoto.datateknologer.se, which at the time of submission ranked 21368178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow

This module exploits a stack buffer overflow in FactoryLink 7.5, 7.5 SP2, and 8.0.1.703. By sending a specially crafted packet, an attacker may be able to execute arbitrary code due to the improper use of a vsprintf function while processing the user-supplied text field. Originally found and post...

VUPEN Security Research - Apple Safari WebKit Block Dimensions Handling Integer Overflow

VUPEN Security Research - Apple Safari WebKit Block Dimensions Handling Integer Overflow http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with 4.45 ...

Unfixed XSS vulnerability at www.psshelp.com

Security researcher P0W3RFU7, has submitted on 14/03/2011 a cross-site-scripting XSS vulnerability affecting www.psshelp.com, which at the time of submission ranked 7973547 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Joomla 1.6.0 Cross Site Scripting

========================================== Joomla! 1.6.0 | Cross Site Scripting XSS Vulnerability ========================================== 1. OVERVIEW Joomla! 1.6.0 was vulnerable to Cross Site Scripting. 2. PRODUCT DESCRIPTION Joomla is a free and open source content management system CMS for...

SuSE 11.1 Security Update : mozilla-xulrunner191 (SAT Patch Number 4085)

Mozilla XULRunner 1.9.1 has been updated to version 1.9.1.17, fixing the following security issues : - Several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products have been identified and fixed. Some of these bugs showed evidence of memory corruption under...

CoolZip 2.0 zip Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow CoolZip 2.0 +Date: 12\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/coolzip-download-7097.html +Version: 2.0 +Tested On WIN-XP SP3 Portugues Brasil +CVE: N/A x...

CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

Mozilla Products Multiple Vulnerabilities (MFSA2011-02, MFSA2011-03, MFSA2011-04, MFSA2011-05, MFSA2011-06, MFSA2011-07) - Windows

Mozilla Firefox/Seamonkey are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.mysql.ru

Security researcher Gamoscu, has submitted on 03/09/2011 a cross-site-scripting XSS vulnerability affecting www.mysql.ru, which at the time of submission ranked 37426 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www.univie.ac.at

Security researcher Gamoscu, has submitted on 03/09/2011 a cross-site-scripting XSS vulnerability affecting www.univie.ac.at, which at the time of submission ranked 8460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currentl...

Web Design by Webz SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : Web Design by Webz Vulnerable to SQL Injection Web : http://www.webz.com.my/ Found by: p0pc0rn 08/03/2011 Dork : intext:"Web Design by Webz" filetype:asp SQL - Microsoft JET Database Engine error...

Gentoo Security Advisory GLSA 201101-03 (libvpx)

The remote host is missing updates announced in advisory GLSA 201101-03. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Adobe Reader PDF Font Data Length Heap Corruption (APSB11-03; CVE-2011-0594)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A heap corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability...

Adobe Reader JPEG 2000 Embedded in PDF File Memory Corruption (APSB11-03; CVE-2011-0602)

Adobe Reader and Acrobat is a family of computer programs developed by Adobe Systems, designed to view, create, manipulate and manage files in Adobe's core technology, the Portable Document Format PDF. PDF files can contain JPEG 2000 images that are displayed when the files are opened in Adobe...

RuubikCMS Shell Upload

Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploit === http://server/patch...

Limelight Software Ltd SQL Injection

© Limelight Software Ltd article.php Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : PHP Sql Injection Vunerability .:. Vendor :...

CVE-2011-0131

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0130

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...