CVE-2007-4140

Buffer overflow in Live for Speed LFS S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file replay file that contains a long car name...

CVE-2007-4140

CVE-2007-4140 : Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows remote attackers to execute arbitrary code via a replay file (.mpr) containing a long car name. The vulnerability is due to an overflow in the replay file handling. Exploitation details or patches are not provided ...

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

Xserver 0.1 Alpha Post Request Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1 Alpha URL -...

Xserver 0.1 Alpha Post Request Remote Buffer Overflow Exploit

Exploit for linux platform in category dos / poc ============================================================= Xserver 0.1 Alpha Post Request Remote Buffer Overflow Exploit ============================================================= !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | |...

Xserver 0.1 Alpha - POST Remote Buffer Overflow (PoC)

Xserver 0.1 Alpha - POST Remote Buffer Overflow PoC !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1...

Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)

!/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1 Alpha URL - http://sourceforge.net/projects/xserver/...

LDAP-Server

Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days ToDo: Add execute shell ToDo: Test vulnerable targets...

CVE-2007-3593

Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...

CVE-2007-3593

Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...

[SECURITY] [DSA 1329-1] New gfax packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1329-1 [email protected] http://www.debian.org/security/ Steve Kemp July 05, 2007 - ------------------------------------------------------------------------ Package : gfax Vulnerability :...

[Full-disclosure] [SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1326 [email protected] http://www.debian.org/security/ Steve Kemp July 01, 2007 -...

[Full-disclosure] [SECURITY] [DSA 1327-1] New gsambad packages fix unsafe temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1327 [email protected] http://www.debian.org/security/ Steve Kemp July 01, 2007 -...

[SECURITY] [DSA 1326-1] New fireflier-server packages fix unsafe temporary files

------------------------------------------------------------------------ Debian Security Advisory DSA-1326 [email protected] http://www.debian.org/security/ Steve Kemp July 01, 2007 - ------------------------------------------------------------------------ Package : fireflier-server...

Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities

No description provided by source. Sun Board 1.00.00 Alpha Multiple Remote File Inclusion Vulnerabilities D.Script : http://mesh.dl.sourceforge.net/sourceforge/sunboard/sunboard.zip V.Code : require $sunPath.'config.php'; requireonce $sunPath.'dbms/'.$dbtype.'.php'; In : /include.php Exploits :...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in 1 the sunPath parameter to include.php or 2 the dir parameter to skin/board/default/doctype.php...

CVE-2007-3370

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in 1 the sunPath parameter to include.php or 2 the dir parameter to skin/board/default/doctype.php...

CVE-2007-3370

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in 1 the sunPath parameter to include.php or 2 the dir parameter to skin/board/default/doctype.php...

GNU Emacs GIF图形处理远程拒绝服务漏洞

Emacs是一个可扩展的实时显示编辑器。 Emacs在处理畸形GIF图形时存在漏洞，远程攻击者可能利用此漏洞导致用户Emacs崩溃。 Emacs没有正确地计算某些GIF图形的大小，如果用户受骗打开了恶意的GIF图形的话，就会导致Emacs出现分段错误而崩溃。 GNU Emacs Debian ------ Debian已经为此发布了一个安全公告（DSA-1316-1）以及相应补丁: DSA-1316-1：New emacs21 packages fix denial of service 链接：http://www.debian.org/security/2007/dsa-1316...

[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1310-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.13-5etch1...