4438 matches found
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
============================================================ Discuz! Plugin Crazy Star = 2.0 Sql injection Vulnerability ============================================================ ========================Author============================ + Founded : ZhaoHuAn + Contact :...
Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...
The Microsoft MsVidCtl Video Control Flaw Explained
From Websense Security Labs The recently publicized Zero-Day Vulnerability in Microsoft DirectShow is in the wild and spreads through infection of thousands of legitimate Web sites. The proof-of-concept of the vulnerability is out and exploitation is very easy to achieve. In our labs we have been...
暴风影音（BaoFeng Storm）播放文件缓冲区溢出漏洞
暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音的medialib.dll库在处理smpl播放列表文件时存在栈溢出漏洞，用户受骗打开了包含有超长路径的播放列表文件就会触发这个溢出，导致执行任意指令。 .text:1000567B ; int stdcall sub1000567BLPCWSTR pszUrl,DWORD pcchPath .text:1000567B sub1000567B proc near ; DATA XREF: .rdata:100248D4 o .text:1000567B .text:1000567B FileName = word ptr -628h...
Baofeng Media Player Stack Overflow
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Baofeng Media Player playlist stack overflow vulnerability
Baofeng Media Player playlist stack overflow vulnerability By Jambalaya of Nevis Labs Date: 2009.06.24 Vender: Baofeng Affected: Storm 3.9.62 Other version may also be affected Overview: Baofeng is a widely popular media player in China, and it plays many common media file formats. There are almo...
Unfixed XSS vulnerability at www.washingtonchinareview.org
Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.washingtonchinareview.org, which at the time of submission ranked 12424883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/201...
Oblog多用户博客程序attachment.asp页面越权漏洞
oBlog多用户博客程序是目前国内应用最广泛的博客程序。OBLOG程序已经广泛应用在国内数万家网站，覆盖国内上千万上网人群，并经过上千家知名网站的严格检测，被称为国内博客建站第一程序oBlog多用户博客程序”是目前国内应用最广泛的博客程序。 漏洞文件：attachment.asp 1. !-- include file= inc/incsyssite.asp -- 2. % 3. Dim Path,rs,FileID,ShowDownErr,uid,fileext 4. Dim SQL 5. Path = TrimRequest path 6. FileID = TrimRequest...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
Exploit for windows platform in category remote exploits ================================================================ KingSoft Web Shield = 1.1.0.62 XSS/Code Execution Vulnerability ================================================================ KingSoft Web Shield XSS and Remote Code...
KingSoft Web Shield XSS / Code Execution
KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above...
KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting / Code Execution
KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...
China steps up fight against cybercrime
From CSO Robert McMillan In the face of increased attacks by its citzens against Chinese networks, China is stepping up the severity and enforcement of its computer crime laws. China often is cited as one of the major havens for hackers and malware authors, but as this IDG News Service report...
team 1.x - File Disclosure / Cross-Site Scripting
--------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...
team 1.x - File Disclosure Cross-Site Scripting
team 1.x - File Disclosure Cross-Site Scripting --------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS...
Flexphpic 0.0.x SQL Injection
Autore: S.W.A.T. Email: [email protected] Site: Www.BaTLaGH.coM Cms: Flexphpic 0.0.4 & Flexphpic Pro 0.0.3 Download: http://www.china-on-site.com/flexphpic/downloads.php Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...
Flexphpic 0.0.x (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Flexphpic 0.0.x Auth Bypass SQL Injection Vulnerability ========================================================= Autore: S.W.A.T. Cms: Flexphpic 0.0.4 & Flexphpic Pro 0.0.3 Downloa...
Flexphplink 0.0.x (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Flexphplink 0.0.x Auth Bypass SQL Injection Vulnerability =========================================================== Autore: x0r Cms: Flexphplink Pro Version: 0.0.7 Download:...
Baidu Hi IM client software DoS bug, div zero make client crash
Baidu Hi IM client software DoS bug, div zero make client crash -- CVE ID: Not assigned -- Affected Vendors: Baidu -- Affected Products: Baidu Hi IM software -- Vulnerability Details: Our automatic bug exploiting tools have found a DoS bug in Baidu Hi IM client which is a popular IM software in...
Baidu Hi IM software parsing plaintext stack overflow
Our automatic bug exploiting tools have found a buffer overflow bug in Baidu Hi IM software which is a popular IM software in China. This bug is due to Baidu Hi do not strictly check the deciphered plaintext format in CSTransfer.dll. Because of encryption mechanism of Baidu Hi, it is hard to...