Lucene search
+L

3335 matches found

seebug.org
seebug.org
added 2009/10/23 12:0 a.m.16 views

PGP4Win 1.4.9 PoC

No description provided by source. GPG4Win - GNU Privacy Assistant - GPA.EXE - Crash PoC Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Paste this into GPA Clipboard, Verify. ''' -----BEGIN PGP MESSAGE----- Charset: ISO-8859-1 Version: GnuPG v1.4.9 GNU/Linux Comment: If you Verify me in Clipboard...

7.1AI score
SaveExploits0
Symantec
Symantec
added 2009/10/13 12:0 a.m.16 views

Microsoft Internet Explorer HTML Component Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

8AI score
SaveExploits0References5Affected Software4
Zero Science Lab
Zero Science Lab
added 2009/06/01 12:0 a.m.36 views

Mp3 Tag Assistant Pro 2.92 (tag metadata) Remote Stack Overflow PoC

Summary MP3 Tag Assistant Professional 2.92 is a professional-level audio tag editor with UNICODE support. Description MP3 Tag Assistant Professional 2.92 is vulnerable to a stack buffer overflow attack when loading a malicious mp3 file or file that supports tags filled with overly long A's in it...

9.3CVSS6AI score0.0478EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2009/05/13 12:0 a.m.24 views

CastRipper 2.50.70 .PLS Universal Stack Overflow

!/usr/bin/perl CastRipper 2.50.70 .pls Universal Stack Overflow Exploit Exploited By : zAx [email protected] print "CastRipper 2.50.70 .pls Universal Stack Overflow Exploit\n"; print "Exploited By : zAx"; print "Contact at : [email protected]"; $header =...

1.4AI score
SaveExploits0
securityvulns
securityvulns
added 2009/04/28 12:0 a.m.71 views

[security bulletin] HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01723303 Version: 1 HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

10CVSS0.4AI score0.11434EPSS
SaveExploits0
NVD
NVD
added 2009/02/13 12:30 a.m.26 views

CVE-2009-0011

Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...

7.2CVSS6.8AI score0.00288EPSS
SaveExploits1References8
Prion
Prion
added 2009/02/13 12:30 a.m.22 views

Design/Logic Flaw

Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...

7.2CVSS6.3AI score0.00288EPSS
SaveExploits1References8Affected Software2
CVE
CVE
added 2009/02/13 12:0 a.m.62 views

CVE-2009-0011

CVE-2009-0011 affects Apple Mac OS X 10.5.6; Certificate Assistant mishandles temporary files via an insecure file operation, allowing a local user to overwrite arbitrary files. Root cause: insecure handling of a temporary file. Impact: local elevation of privilege with potential for data integri...

7.2CVSS6.5AI score0.00288EPSS
SaveExploits1References8Affected Software2
Tenable Nessus
Tenable Nessus
added 2009/02/13 12:0 a.m.44 views

Mac OS X Multiple Vulnerabilities (Security Update 2009-001)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied. This security update contains fixes for the following products : - AFP Server - Apple Pixlet Video - CarbonCore - CFNetwork - Certificate Assistant - ClamAV - CoreText - CUPS - DS...

10CVSS7.1AI score0.22621EPSS
SaveExploits34References49
Cvelist
Cvelist
added 2009/02/13 12:0 a.m.40 views

CVE-2009-0011

Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...

6.8AI score0.00288EPSS
SaveExploits1References8
securityvulns
securityvulns
added 2009/02/05 12:0 a.m.66 views

[security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01662367 Version: 1 HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service DoS and Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon ...

10CVSS0.5AI score0.07425EPSS
SaveExploits0
NVD
NVD
added 2008/12/15 6:0 p.m.17 views

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

5CVSS6.3AI score0.07386EPSS
SaveExploits1References5
NVD
NVD
added 2008/12/15 6:0 p.m.20 views

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

7.5CVSS8.3AI score0.02373EPSS
SaveExploits2References6
Prion
Prion
added 2008/12/15 6:0 p.m.21 views

Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

7.5CVSS9AI score0.02373EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2008/12/15 5:45 p.m.24 views

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

6.3AI score0.07386EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2008/12/15 5:45 p.m.34 views

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

8.3AI score0.02373EPSS
SaveExploits2References6
CVE
CVE
added 2008/12/15 5:45 p.m.47 views

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...

7.5CVSS8.4AI score0.02373EPSS
SaveExploits2References6Affected Software1
securityvulns
securityvulns
added 2008/12/14 12:0 a.m.60 views

[security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01623009 Version: 1 HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

7.8CVSS0.3AI score0.02945EPSS
SaveExploits0
zdt
zdt
added 2008/12/09 12:0 a.m.20 views

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== Professional Download Assistant 0.1 Auth Bypass SQL Injection Vuln ==================================================================== Professional Download Assistant 0....

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/09 12:0 a.m.20 views

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

No description provided by source. Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

7.1AI score
SaveExploits0
Rows per page
Query Builder