3305 matches found
Sun Java memory corruption
Memory corruption on GIF files parsing with 0 width block. Can be used for hidden malware installation...
WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion
WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact:...
Fedora Core 6 : ed-0.3-0.fc6 (2007-100)
Thu Jan 18 2007 Karsten Hopp 0.3-0.fc6 - rebuild for FC-6, fixes CVE-2006-6939 - Thu Jan 18 2007 Karsten Hopp 0.3-2 - fix man page permissions 222581 - Mon Nov 13 2006 Karsten Hopp 0.3-1 - update to ed-0.3 Note that Tenable Network Security has extracted the preceding description block directly...
[SECURITY] Fedora Core 6 Update: ed-0.3-0.fc6
Ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. For most purposes, ed has been replaced in normal usage by full-screen editors emacs and vi, for example. Ed was the original UNIX editor, and may be used by some programs. ...
MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-0 0 4)-vulnerability warning-the black bar safety net
In addition there is attention to detail: tested on WinXP SP2 Korean version fully patched except kb929969 & IE 6.0 sorry about that virus hit ratio is only about 1/5 The test environment is WinXP SP2 Korean version, in addition to kb929969, the other patch is complete, IE 6.0 The success rate of...
Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit
No description provided by source. // kav 6.0 0day local priv escalation exploit // by m4d // http://unl0ck.net include windows.h include stdlib.h include stdio.h // r0-shellcode creates C:\Hello.txt with "Hello from ring-0! :" unsigned char Shellcode405 = ...
Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ========================================================== Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit ========================================================== // kav 6.0 0day local priv escalation exploit // by m4d //...
TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion
TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion /\ Citations Aléatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected]...
TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= TLM CMS = 1.1 i-accueil.php chemin Remote File Include Vulnerability ======================================================================= /\ Published : 2007-01-12...
Unfixed XSS vulnerability at www.niakan.com
Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.niakan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currently...
Unfixed XSS vulnerability at www.thewestergards.com
Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.thewestergards.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
Unfixed XSS vulnerability at www.hotpropertyhamilton.com
Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.hotpropertyhamilton.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability
Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...
Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit
Exploit for macOS platform in category local exploits ===================================================================== Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit ===================================================================== !/usr/bin/ruby c 2006 LMH Kevin...
JAF CMS Forum.PHP远程文件包含漏洞
Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion EternalMart Guestbook 1.1.0 emgbadminpath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +admin/auth.php? +code : + + include"$emgbadminpath/authfunc.php"; + + download link :...
Microsoft Word / Open Office 0-day security vulnerability
2 different unknown vulnerabilities are used for hidden malware installation...
fport. vbs for XP/2 0 0 3-vulnerability warning-the black bar safety net
XP/2 0 0 3 the netstat with the"-o"option, so it is easy to use script to achieve fport features. with new regexp . pattern="..P\s+\S+\s+\S+\s+A-Z\s0-9+" . global=true set ms=. executecreateobject"wscript. shell". exec"netstat-ano". stdout. readall end with for each ps in getobject"winmgmts:\\....
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
AtomixMP3 <= 2.3 Malformed M3U Buffer Overflow Exploit
No description provided by source. / ======================================================================== 0-day AtomixMP3 = v2.3 Malformed M3U Buffer Overflow PoC ======================================================================== AtomixMP3 Player/Mixer fails to properly handle large fil...