Microsoft Word 2000 - Code Execution

use at your own risk + Title: Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit 0-day + code by xCuter BongGoo Kang - [email protected] + Critical: High Critical + Impact: MS Word 2000 - Could Allow Arbitrary Command Execution MS word 2003 - Attempts against Word 2003/XP wi...

Design/Logic Flaw

Cisco IOS allows remote attackers to cause a denial of service crash via a crafted IPv6 Type 0 Routing header...

CVE-2007-0481

CVE-2007-0481 affects Cisco IOS IPv6 handling, allowing remote attackers to crash devices by sending a crafted IPv6 Type 0 Routing header. The issue is a DoS with potential for device instability; exploitation requires sending a malicious IPv6 routing header to a Cisco IOS device. Connected docs ...

[Full-disclosure] Cisco Security Advisory: IPv6 Routing Header Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IPv6 Routing Header Vulnerability Advisory ID: cisco-sa-20070124-IOS-IPv6 http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml Revision 1.0 For Public Release 2007 January 24 1600 UTC GMT -...

Sun Java memory corruption

Memory corruption on GIF files parsing with 0 width block. Can be used for hidden malware installation...

WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion

WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact:...

Fedora Core 6 : ed-0.3-0.fc6 (2007-100)

Thu Jan 18 2007 Karsten Hopp 0.3-0.fc6 - rebuild for FC-6, fixes CVE-2006-6939 - Thu Jan 18 2007 Karsten Hopp 0.3-2 - fix man page permissions 222581 - Mon Nov 13 2006 Karsten Hopp 0.3-1 - update to ed-0.3 Note that Tenable Network Security has extracted the preceding description block directly...

[SECURITY] Fedora Core 6 Update: ed-0.3-0.fc6

Ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. For most purposes, ed has been replaced in normal usage by full-screen editors emacs and vi, for example. Ed was the original UNIX editor, and may be used by some programs. ...

MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-0 0 4)-vulnerability warning-the black bar safety net

In addition there is attention to detail: tested on WinXP SP2 Korean version fully patched except kb929969 & IE 6.0 sorry about that virus hit ratio is only about 1/5 The test environment is WinXP SP2 Korean version, in addition to kb929969, the other patch is complete, IE 6.0 The success rate of...

Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit

No description provided by source. // kav 6.0 0day local priv escalation exploit // by m4d // http://unl0ck.net include windows.h include stdlib.h include stdio.h // r0-shellcode creates C:\Hello.txt with "Hello from ring-0! :" unsigned char Shellcode405 = ...

Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================== Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit ========================================================== // kav 6.0 0day local priv escalation exploit // by m4d //...

TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion

TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion /\ Citations Aléatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected]...

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= TLM CMS = 1.1 i-accueil.php chemin Remote File Include Vulnerability ======================================================================= /\ Published : 2007-01-12...

Unfixed XSS vulnerability at www.niakan.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.niakan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currently...

Unfixed XSS vulnerability at www.thewestergards.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.thewestergards.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at www.hotpropertyhamilton.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.hotpropertyhamilton.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability

Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...

Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit

Exploit for macOS platform in category local exploits ===================================================================== Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit ===================================================================== !/usr/bin/ruby c 2006 LMH Kevin...

JAF CMS Forum.PHP远程文件包含漏洞

Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...

EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion

EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion EternalMart Guestbook 1.1.0 emgbadminpath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +admin/auth.php? +code : + + include"$emgbadminpath/authfunc.php"; + + download link :...