30337 matches found
PHP 6.0 Dev str_transliterate() Buffer Overflow
whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...
PT-2010-2242 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Windows Vista versions Gold, SP1, and SP2 Windows Server 2008 versions Gold, SP2, and R2 Windows 7 Description: A denial of service issue exists due to the improper translation of a registry key's virtual path to its real path by the Windows...
PT-2010-2237 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Gold, SP1, and SP2 Microsoft Windows Server 2008 Gold and SP2 Description: The issue allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a deni...
Microsoft Windows MP3音频解码器栈溢出漏洞（MS10-026）
BUGTRAQ ID: 39303 CVE ID: CVE-2010-0480 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中所使用的MP3编码解码器处理AVI媒体文件的方式中存在栈溢出漏洞。如果用户打开包含MP3音频流的特制的AVI文件，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP...
Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)
This host is missing a critical security update according to Microsoft Bulletin MS10-019. OpenVAS Vulnerability Test $Id: secpodms10-019.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Authentication Verification Remote Code Execution Vulnerability 981210 Authors: Veerendra G Updated B...
Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)
This host is missing a critical security update according to Microsoft Bulletin MS10-026. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass
Exploit for windows platform in category local exploits ================================================================== PHP 6.0 Dev strtransliterate Buffer overflow - NX + ASLR Bypass ================================================================== whoami whoami nt authority\system /...
PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)
PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...
Games Script (Galore) Backup Dump Vulnerability
Exploit for php platform in category web applications =============================================== Games Script Galore Backup Dump Vulnerability =============================================== ======================================================================================== | Title :...
Microsoft Windows Kernel Virtual Path Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers may exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...
Microsoft Windows Kernel NULL Pointer Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers can exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Due to the nature of this issue, code executio...
Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
Description The Microsoft Windows Simple Mail Transfer Protocol SMTP Server is prone to a denial-of-service vulnerability. Successful exploits will cause the affected SMTP server to stop responding, denying service to legitimate users. Technologies Affected Avaya Meeting Exchange - Client...
WinSoftMagic Photo Editor .PNG Buffer Overflow
/\ WinSoftMagic Photo Editor .PNG File Buffer Overflow This sploit runs calc.exe or bind to port 4444. Tested On Win XP SP2 & Win VisTa 2008 Code & Discovered By: eidelweiss This Made For Educational purpose only Author will not responsible for any damage Thanks: JosS,r0073r & 0x1D,exploit-db,sp3...
openSUSE Security Update : tomcat6 (tomcat6-2000)
This update of tomcat5/6 fixes : - CVE-2009-2693: CVSS v2 Base Score: 5.8 CVE-2009-2902: CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. - CVE-2009-2901: CVSS v2 Base Score: 4.3 When...
GarageSales - Arbitrary File Upload
Exploit Title: GarageSales Remote Upload Vulnerability Date: 06/04/2010 Author: saidinh0 Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] | Intorduction :| Hi everybody , This my first bug Remote Upload Vulnerability and I wish you lik...
CVE-2008-7254
CVE-2008-7254 affects Irmin CMS (formerly Pepsi CMS) versions 0.5 and 0.6 BETA2. The vulnerability is a directory traversal in includes/template-loader.php that allows an attacker to include and execute arbitrary files via a .. in the _Root_Path parameter when register_globals is enabled. The NVD...
GarageSales Remote Shell Upload
Exploit Title: GarageSales Remote Upload Vulnerability Date: 06/04/2010 Author: saidinh0 Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] | Intorduction :| Hi everybody , This my first bug Remote Upload Vulnerability and I wish you lik...
Gravity GTD rpc.php Malformed objectname Parameter (CVE-2008-5962; CVE-2008-5963)
Gravity GTD is an open source list manager for tracking action items according to the principles of Getting Things Done GTD. There exist multiple vulnerabilities in Gravity GTD. One attack vector could allow remote attackers to conduct directory traversal attacks and possibly read or write...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to 1 AddPost.asp, 2 AddTopic.asp, 3 AdminDefault.asp, 4 Bank.asp, 5 Manage.asp, and 6 ShowPost.asp. NOTE: the provenance of this information i...
