BadBlue 2.72 - PassThru Remote Buffer Overflow

!/usr/bin/perl -w http://aluigi.altervista.org/adv/badblue-adv.txt https://www.securityfocus.com/bid/26803 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 exploit for stack overflow in badblue 2.72 Credit to Luigi Auriemma Jacopo Cervini [email protected] 22/12/2007 use IO::Socket;...

MMSLamp (idpro) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== MMSLamp idpro Remote SQL Injection Vulnerability ================================================== Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Date : 22/12/2007 Bug in :...

Unfixed XSS vulnerability at www.dha.com.tr

Security researcher st@rext, has submitted on 23/12/2007 a cross-site-scripting XSS vulnerability affecting www.dha.com.tr, which at the time of submission ranked 346185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

Security fix for the ALT Linux 9 package wireshark version 0.99.7-alt1

Dec. 23, 2007 Sir Raorn 0.99.7-alt1 - 0.99.7 + CVE-2007-6451 + CVE-2007-6450 + CVE-2007-6441 + CVE-2007-6439 + CVE-2007-6438 + CVE-2007-6121 + CVE-2007-6120 + CVE-2007-6119 + CVE-2007-6118 + CVE-2007-6117 + CVE-2007-6116 + CVE-2007-6115 + CVE-2007-6114 + CVE-2007-6113 + CVE-2007-6112 +...

MS Windows 2000 AS SP4 Message Queue Exploit (MS07-065)

No description provided by source. merry christmas Sysadmins Microsoft Message Queue POC exploit MS07-065 Mario Ballano - mballanogmail.com - http://www.48bits.com Andres Tarasco - atarascogmail.com - http://www.tarasco.org Original Advisory:...

mysql security update

CentOS Errata and Security Advisory CESA-2007:1222-001 Updated mysql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user,...

HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01311918 Version: 1 HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Security Bullet...

CVE-2007-6513

HP eSupportDiagnostics ActiveX control (hpediag.dll) version 1.0.11.0 contains exported methods ReadTextFile and ReadValue that allow a remote attacker to read arbitrary files and read arbitrary registry values. This constitutes an information disclosure vulnerability in the HP eSupportDiagnostic...

CVE-2007-6515

CVE-2007-6515 : TCL injection in SiteScape Forum via support/dispatch.cgi where attacker-supplied code separator characters in the query string enable remote arbitrary TCL code execution. Connected sources document this as a TCL injection issue affecting SiteScape Forum/Enterprise Forum 7.x, with...

CVE-2007-6516

The CVE-2007-6516 entry describes a buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) version 1.0.0.1, exploitable by sending a long FileName property to enable remote code execution. The vulnerability is documented by multiple sources (NVD, CVE list). The provided connect...

CVE-2007-6514

CVE-2007-6514 affects Apache HTTP Server when run on Linux with a document root on a Windows SMB share mounted via smbfs. The vulnerability arises from a trailing backslash () not being handled by the AddType directive, allowing remote attackers to disclose unprocessed contents of PHP files (e.g....

CVE-2007-6512

CVE-2007-6512 affects the PHP MySQL Banner Exchange 2.2.1 product. The vulnerability is an improper access control that stores sensitive information under the web root, allowing remote attackers to obtain database information by directly requesting inc/lib.inc. The available documents (NVD entry)...

CVE-2007-6509

Unspecified vulnerability in Appian Enterprise Business Process Management BPM Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp...

CVE-2007-6510

CVE-2007-6510 describes multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) versions up to and including 1.62, enabling remote code execution via crafted files to specific rippers: AMOS-MusicBank, FuzzacPacker, QuadraComposer. A fourth component, SkytPacker ripper, has an unknown imp...

CVE-2007-6508

CVE-2007-6508 is a directory traversal vulnerability in xeCMS 1.0 (view.php) that allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter. The entry is supported by multiple sources (NVD, CVE List) with a CVSS v2 base score of 7.5 (HIGH) and network attac...

CVE-2007-6509

CVE-2007-6509 affects Appian Enterprise BPM Suite 5.6 SP1. The vulnerability is described as an unspecified remote denial of service caused by sending a crafted packet to port 5400/tcp. The connected documents confirm a DoS exploit context (e.g., Metasploit module and PoC references), but no patc...

CVE-2007-6510

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...

CVE-2007-6511

Websense Enterprise 6.3.1 is affected by a bypass vulnerability in its content filtering mechanism. The issue allows remote attackers to circumvent filtering by sending HTTP requests with specific User-Agent headers (RealPlayer G2, MSMSGS, or StoneHttpAgent), causing the URL to be categorized as ...

CVE-2007-6511

Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a 1 RealPlayer G2, 2 MSMSGS, or 3 StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization...

libexif security update

CentOS Errata and Security Advisory CESA-2007:1165 Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif...