1852 matches found
BlogPHP config.php SQL injection login bypass
--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...
Windows PHP buffer overflow
mysqlconnect buffer overflow...
Apple iTunes code execution
CreateProcess is used insecurely on external application execution...
iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability
Multiple Vendor Insecure Call to CreateProcess Vulnerability iDEFENSE Security Advisory 11.15.05 www.idefense.com/application/poi/display?id=340&type=vulnerabilities November 15, 2005 I. BACKGROUND The Microsoft Windows API includes the CreateProcess function as a means to create a new process an...
[Full-disclosure] Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHP registerglobals Activation Vulnerability in parsestr Release Date: 2005/10/31 Last Modified: 2005/10/31 Author: Stefan Esser [email protected] Application: PHP4 =...
[SA16264] Easy PX 41 CMS Cross-Site Scripting and Information Disclosure
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
GLSA-200507-17 : Mozilla Thunderbird: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200507-17 Mozilla Thunderbird: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Thunderbird: 'mozbugra4' and 'shutdown' discovered that Thunderbird was improperly cloning base objects MFSA...
FreeBSD : mozilla -- privilege escalation via non-DOM property overrides (a6427195-c2c7-11d9-89f7-02061b08fc24)
A Mozilla Foundation Security Advisory reports : Additional checks were added to make sure JavaScript eval and Script objects are run with the privileges of the context that created them, not the potentially elevated privilege of the context calling them in order to protect against an additional...
linux/x86 execve /bin/sh tolower() evasion 41 bytes
No description provided by source. / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include stdio.h char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" / movl %esi, %edi / "\x83\xc7\x07" / addl $0x07,...
linux/x86 execve /bin/sh tolower evasion 41 bytes
linux/x86 execve /bin/sh tolower evasion 41 bytes. Shellcode exploit for linx86 platform / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" /...
linux/x86 execve /bin/sh tolower() evasion 41 bytes
Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh tolower evasion 41 bytes =================================================== / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char...
