PHP 5.3.8 - Hashtables Denial of Service

PHP 5.3.8 - Hashtables Denial of Service Exploit Title: CVE-2011-4885 PHP Hashtables Denial of Service Exploit Date: 1/1/12 Author: infodox Software Link: php.net Version: 5.3. Tested on: Linux CVE : CVE-2011-4885 Exploit Download -- http://infodox.co.cc/Downloads/phpdos.txt...

PHP Hashtables Denial of Service

Exploit for php platform in category dos / poc 0day.today 2018-02-06...

VulnCheck KEV: CVE-2011-1269

Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory,...

PHP 5.3.8 - Hashtables Denial of Service

Exploit Title: CVE-2011-4885 PHP Hashtables Denial of Service Exploit Date: 1/1/12 Author: infodox Software Link: php.net Version: 5.3. Tested on: Linux CVE : CVE-2011-4885 Exploit Download -- http://infodox.co.cc/Downloads/phpdos.txt...

PHP 5.3.x Hashtables Proof Of Concept

...

PHP Web表单哈希冲突拒绝服务漏洞

BUGTRAQ ID: 51193 CVE ID: CVE-2011-4885 PHP 5.3.9之前版本在计算表单参数哈希值的实现上没有提前限制哈希冲突，存在拒绝服务漏洞，通过发送小量的特制webform表单张贴到受影响应用程序，攻击者可利用此漏洞导致使用PHP的站点失去响应正常请求的能力 0 PHP 5.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

The Hacker News Hacking Awards : Best of Year 2011

The Hacker News Hacking Awards : Best of Year 2011 2011 has been labeled the "Year of the Hack" or "Epic Fail 2011". Hacking has become much easier over the years, which is why 2011 had a lot of hacking for good and for bad. Hackers are coming up with tools as well as finding new methods for...

[SECURITY] [DSA 2376-2] ipmitool security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2376-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 31, 2011 http://www.debian.org/security/faq -...

CVE-2011-4617

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

CVE-2011-4617

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

CVE-2011-4620

The CVE-2011-4620 vulnerability in PLIB 1.8.5 (used by TORCS 1.3.1 and other products) is a buffer overflow in the ulSetError function (src/util/ulError.cxx) triggered by a long error message, enabling user‑provided remote input to corrupt memory and potentially execute arbitrary code. Public adv...

CVE-2011-1710

The CVE-2011-1710 entry describes multiple integer overflows in the HTTP server of the Novell XTier framework 3.1.8, enabling remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables. Public documents identify affected so...

CVE-2011-4617

Summary of the CVE-2011-4617 details from connected docs : The issue affects the Python virtualenv tool, specifically virtualenv.py in virtualenv before 1.5, enabling a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/ file. The Gentoo GLSA-201206-17 advisory documents t...

CVE-2011-5207

creationtimestamp| type| source ---|---|--- 2011-12-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36481...

CVE-2011-4362

creationtimestamp| type| source ---|---|--- 2011-12-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18295...

Lighttpd Proof of Concept code for CVE-2011-4362

Exploit for linux platform in category dos / poc / Primitive Lighttpd Proof of Concept code for CVE-2011-4362 vulnerability discovered by Xi Wang Here the vulnerable code src/httpauth.c:67 --- CUT --- static const short base64reversetable256 = -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -...

CVE-2011-5038

SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2011-5045

PHP Booking Calendar 10e is vulnerable to a cross-site scripting (XSS) flaw in details_view.php via the page_info_message parameter. The underlying issue is insufficient sanitization of user-supplied data, enabling arbitrary script execution in the victim’s browser. OpenVAS entries describe the v...

CVE-2011-5038

CVE-2011-5038 is a SQL injection vulnerability in hitCode hitAppoint 4.5.17 (and possibly earlier) that allows remote attackers to execute arbitrary SQL commands through the username parameter in index.php. This entry is supported by multiple connected sources (NVD/NVD-like records, CVE lists, PR...

CVE-2011-5040

Infoproject Biznis Heroj is affected by multiple XSS vulnerabilities. The issue arises in the config parameter used by two components: nalozi_naslov.php and widget.dokumenti_lista.php, enabling remote attackers to inject arbitrary web script or HTML. The CVE-2011-5040 entry notes a NVD CVSSv2 bas...