Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation

Exploit for unknown platform in category local exploits ===================================================================== Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation ===================================================================== Title: Adobe Photoshop Elements...

Adobe RoboHelp Server RCE Vulnerability (APSB09-14/APSA09-05)

Adobe RoboHelp Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP-Nuke 8.0 SQL Injection / Remote Shell

==================================== PHP-Nuke Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com Product:...

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ ITechBids 8.0 itechd.php productid Blind SQL Injection Exploit ================================================================ !/usr/bin/perl use LWP::UserAgent; use...

MS Internet Explorer 8.0.7100.0 Simple HTML Remote Crash PoC

Exploit for unknown platform in category dos / poc ============================================================ MS Internet Explorer 8.0.7100.0 Simple HTML Remote Crash PoC ============================================================ Veryfied with IE8.0.7100.0 on W7 x64 RC. Any comments reaseon?...

CVE-2009-2649

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

WzdFTPD 8.0 - Remote Denial of Service

WzdFTPD 8.0 - Remote Denial of Service !/usr/bin/env python WzdFTPD Denial of Service = 8.0 wzdftpddos.py by Jose Miguel Esparza 2007-01-19 S21sec labs import sys,socket user = "guest" passw = "guest" if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.arg...

CVE-2009-1203

WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party 1 FTP and 2 CIFS servers, which makes it easier for remote attackers to trick a user into sending...

CVE-2009-1201

Eval injection vulnerability in the cscowrapjs function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting XSS attacks by setting CSCOWebVPN'process...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

PHP-Nuke SQL Injection Vulnerability

PHP-Nuke is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpnuke:php-nuke";...

Sql injection

SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header...

CVE-2009-1842

SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header...

Sun IDM Arbitrary Commands Execution Vulnerability

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

Trend Micro OfficeScan Client Denial Of Service Vulnerability

This host is installed with Trend Micro OfficeScan Client and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescandosvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Trend Micro OfficeScan Client Denial Of Service Vulnerability Authors: Antu Sanadi...

Symantec Brightmail Gateway控制中心跨站脚本和权限提升漏洞

BUGTRAQ ID: 34641,34639 CVECAN ID: CVE-2009-0063,CVE-2009-0064 Brightmail Gateway是赛门铁克的信息安全管理平台。 Brightmail Gateway设备的WEB管理控制台Brightmail安全中心没有正确地过滤外部客户端输入，远程攻击者可以通过提交恶意请求执行跨站脚本攻击；此外某些控制台函数还可能允许非特权的控制中心用户获得提升的权限。 Symantec Brightmail Gateway 8.0 Symantec Brightmail Gateway 5.0 Symantec --------...