CVE-2003-1143

CVE-2003-1143 affects Croteam Serious Sam demo test 2 (version 2.1a) and Serious Sam: The First Encounter/Second Encounter (version 1.05). The vulnerability allows remote attackers to trigger a denial-of-service (crash or freeze) by sending a TCP packet with an invalid first parameter. The availa...

siteEnable.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: SiteEnable CMS Multiple Severe XSS and Sql injections Risk: High Date: 1/04/2005 Vendor: http://www.siteenable.com/default.asp Quote from the Vendor: "SiteEnable starts at only $189.00" I could test...

rna_deleter.rgp

RealArcade download My Games 06/13/2001 10:51 RealArcade RealNetworks http://www.real.com Copyright 2001, RealNetworks [email protected] RealGames Server RealGames Server games-dl.real.com /gameconsole/games/demorgses/%f Not used in Beta1 Flux 950258D1-7ABD-4afc-8886-449B98CE8224 1.0 Demo RGI...

Desert Rats vs. Afrika Korps (Haegemonia bug)

Yesterday has been released the multiplayer demo 1.18 of the game Desert Rats vs. Afrika Korps http://www.desertratsgame.com. Also this game as Haegemonia created by the same developers is vulnerable to the same server crash bug. I have updated the advisory and proof-of-concept I released ten day...

[Full-Disclosure] TrackMania Demo Denial of Service

TrackMania Demo Denial of Service The original document can be found at http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml .oO Overview Oo. TrackMania Demo Denial of Service Discovered on 2003, November, 30th Vendor: TrackMania Official website http://www.trackmania.com TrackMania i...

Nadeo Game Engine - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9604/info It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to the software on TCP port 2350. Nadeo...

Nadeo Game Engine - Remote Denial of Service

Nadeo Game Engine - Remote Denial of Service // source: https://www.securityfocus.com/bid/9604/info It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...

Several Things about IE bugs

Several Things about IE bugs: 1st, i coded a stable demo of 1stCleanRc: http://www.safecenter.net/UMBRELLAWEBV4/1stCleanRc/1stCleanRc-Xp/index.html some anti-Virus firewall tools may detect this exploit as a virus, but most of these tools will fail if the exploit files are changed.malware also...

Six Step IE Remote Compromise Cache Attack

Six Step IE Remote Compromise Cache Attack tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 Overview A six step cache attack has been found which allows for remote compromise of systems running Internet Explorer merely by viewing a webpage. This attack is possible part...

zenTrack Remote Command Execution Vulnerabilities

Subject: zenTrack Remote Command Execution Vulnerabilities Author: farking [email protected] Product: zenTrack 2.4.1 latest and below Vendor: http://zendocs.phpzen.net/zentrack / http://sourceforge.net/projects/zentrack/ Status: Vendor contacted 27/05/2003 Location:...

i cracked restriction of 'zone' in mozilla.

i cracked restriction of 'zone' in mozilla. "that's all" is the end of file if you are in a hurry tested OS:"Windows Server 2003" NETSCAPE Ver String: "Mozilla/5.0 Windows; U; Windows NT 5.2; zh-CN; rv:1.0.1 Gecko/20020823 Netscape/7.0 " downloaded on "2003/3/31 UTC+800" MOZILLA Ver String:...

ProtWare "HTML Guardian" has pathetic "encryption"

For $40 or $70, ProtWare's "HTML Guardian" http://www.protware.com claims to "encrypt html code and javascripts, making it impossible to reuse them." Unfortunately, "HTML Guardian" does not do anything more than to obfuscate the HTML source code. There is no encryption. In fact, the JavaScript th...

PPTP

For those of you who have a desire to crash Microsoft's PPTP stack, I have a pptp .spk script linked off of http://www.immunitysec.com/spike.html. It would probably be good to run against other PPTP stacks as well. Likewise, SPIKE's msrpcfuzzer takes down free software dce-rpc stacks just as fast...

CVE-2002-0731

Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl...

CVE-2002-0731

The CVE-2002-0731 entry describes a Cross-site scripting vulnerability in the demonstration scripts for vqServer. The issue arises when an attacker can craft a link with script code in the arguments to demo scripts (e.g., respond.pl), enabling remote script execution in the victim’s browser via s...

More SWF vulnerabilities?

Vulnerable systems: unpatched "standalone Flash players" Macromedia Shockwave Flash player versions before January 2002? Fix: "In response to the discovery of the virus, in January Macromedia released an update to its standalone Flash player that causes the player to ignore the "exec" action."...

CVE-2001-0372

CVE-2001-0372 affects Akopia Interchange versions 4.5.3 through 4.6.3. The vulnerability arises because the installation of demo stores creates a default group account named ":backup" with no password, enabling a remote attacker to gain administrative access via the demo stores using the accounts...

SAP R/3 Web Application Server Demo for Linux: root exploit

Topic: SAP R/3 Web Application Server Demo for Linux: root exploit Module: /usr/sap/WAS/SYS/exe/run/saposcol Announced: 2001-04-29 Affects: WAS demo as released on CeBit Vendor: 1SAP AG, Walldorf, Germany Vendor-Status: informed 2001-04-09 acknoledged 2001-04-10 workaround specified 2001-04-17...

ISC BIND 8.2.x - TSIG Remote Stack Overflow (4)

ISC BIND 8.2.x - TSIG Remote Stack Overflow 4 / This exploit has been fixed and extensive explanation and clarification added. Cleanup done by: Ian Goldberg Jonathan Wilkins NOTE: the default installation of RedHat 6.2 seems to not be affected due to the compiler options. If BIND is built from...