Apple iOS Safari - decodeURI Remote Crash

Apple iOS Safari - decodeURI Remote Crash Apple iPhone 3 Safari JavaScript - decodeURI Remote Crash decodeURI'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - 'decodeURI' Remote Crash

Apple iPhone 3 Safari JavaScript - decodeURI Remote Crash decodeURI'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - body alink Remote Crash

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

Adobe Flash Media Server < 3.0.7 / 3.5.5 / 4.0.1 Multiple Vulnerabilities (APSB10-27)

The remote host is running Adobe Flash Media Server, an application server for Flash-based applications. The version running on the remote host is earlier than version 3.0.7, 3.5.5, or 4.0.1. Such versions are potentially affected by the following vulnerabilities : - The server is vulnerable to a...

MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================ MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability ============================================================ Product: MemHT Portal Vendor: Miltenovik Manojlo...

vBulletin v 4.0.1 XSS Vulnerability

Exploit for unknown platform in category web applications =================================== vBulletin v 4.0.1 XSS Vulnerability =================================== + Script: vBulletin Version 4.0.1 + Vendor: www.vbulletin.com + Author: W4n73d Bug: Cross Site Scripting XSS Exploit:...

vBulletin version 4.0.1 remote SQL injection exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q vBulletin Version 4.0.1 Remote SQL Injection Exploit By indoushka www.iq-ty.com/vb Souk Naamane 00213771818860 Algeria Hackerz [email protected] Dork: Powered by vBulletin Version 4.0.1 ; if !$ARGV2 print q Usage: perl...

vBulletin 4.0.1 SQL Injection

!/usr/bin/perl use IO::Socket; print q vBulletin™ Version 4.0.1 Remote SQL Injection Exploit By indoushka www.iq-ty.com/vb Souk Naamane 00213771818860 Algeria Hackerz [email protected] Dork: Powered by vBulletin™ Version 4.0.1 ; if !$ARGV2 print q Usage: perl VB4.0.1.pl host /directory/...

NetBSD SHA2实现存在缓冲区溢出漏洞

Bugraq ID: 35853 NetBSD是一款基于BSD的操作系统。 NetBSD SHA2实现存在边界错误，本地攻击者可以利用漏洞触发缓冲区溢出，可能以应用程序权限执行任意指令。 程序使用sys/sha2.h中的SHA2实现，链接libcrypto库可被4或者8个字节的固定内容溢出。溢出发生于HASH INIT函数调用过程中如SHA256Init，init函数传递错误的上下文大小作为memset参数，可在之后的拷贝过程中覆盖缓冲区之后的4 字节内容。 NetBSD NetBSD 4.0.2 NetBSD NetBSD 4.0.1 NetBSD NetBSD 5.0 NetBSD...

Apple Safari 4 - reload() Denial of Service

Apple Safari 4 - reload Denial of Service source: https://www.securityfocus.com/bid/35555/info Apple Safari is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to crash the affected application, denying servic...

MemHT Portal 4.0.1 - Remote Code Execution

MemHT Portal 4.0.1 - Remote Code Execution !/usr/bin/perl MemHT Portal 7 Main::Usage; else HTTP::UserAgent$uagent; MemHT::Login; MemHT::Exploit$file; MemHT Exploit Package package MemHT; sub Exploit my $resp; my $file = shift...

Apple Safari 3.2 WebKit - alink Property Memory Leak Remote Denial of Service (1)

Apple Safari 3.2 WebKit - alink Property Memory Leak Remote Denial of Service 1 source: https://www.securityfocus.com/bid/33080/info Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library. Remote attackers can exploit this issue to crash the affected browser...

Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (1)

source: https://www.securityfocus.com/bid/33080/info Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library. Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition. Apple Safari 3.2 running on Microsoft Windows Vis...

Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (2)

source: https://www.securityfocus.com/bid/33080/info Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library. Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition. Apple Safari 3.2 running on Microsoft Windows Vis...

EZ Publish 3.9.53.10.14.0.1 - Privilege Escalation

EZ Publish 3.9.53.10.14.0.1 - Privilege Escalation = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible tested on version 3.9.0 usage:...

MemHT Portal 4.0.1 SQL Injection Code Execution Exploit

No description provided by source. !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to...

MemHT Portal 4.0.1 - SQL Injection / Code Execution

!/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to check whether script has been...

MemHT Portal 4.0.1 SQL Injection Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= MemHT Portal 4.0.1 SQL Injection Code Execution Exploit ======================================================= !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered &...

Sql injection

SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2336

CVE-2008-2336 describes an SQL injection flaw in the web app 68 Classifieds 4.0.1, specifically in category.php where the cat parameter enables remote attackers to execute arbitrary SQL commands. The vulnerability is evidenced across multiple sources (NVD, CVE listings, and related feeds), indica...