[Full-disclosure] User privilege escalation exploit.

Vendor: CyberSource Version: Business Center, Essentials/Small Business, https://businesscenter.cybersource.com/ Severity: Vulnerability allows malicious employees or comprimised accounts to steal money. Vendor Status: Notified, expects to fix issue some time in 2006. Overview: Business Center is...

CVE-2005-1607

Cross-site scripting XSS vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the 1 merchant or 2 demo parameters...

CVE-2005-1607: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the 1 merchant or 2 demo parameters...

CVE-2005-1547

CVE-2005-1547 : BakBone NetVault is affected by a heap-based buffer overflow in the demo version (and possibly other versions) that allows a remote attacker to execute arbitrary commands by sending a large packet to port 20031. The vulnerability is rated CVSSv2 base 7.5 (HIGH) with network access...

CVE-2003-1143

CVE-2003-1143 affects Croteam Serious Sam demo test 2 (version 2.1a) and Serious Sam: The First Encounter/Second Encounter (version 1.05). The vulnerability allows remote attackers to trigger a denial-of-service (crash or freeze) by sending a TCP packet with an invalid first parameter. The availa...

CVE-2003-1143

Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service crash or freeze via a TCP packet with an invalid first parameter...

CVE-2003-1143: Undefined Security Weakness

Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service crash or freeze via a TCP packet with an invalid first parameter...

siteEnable.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: SiteEnable CMS Multiple Severe XSS and Sql injections Risk: High Date: 1/04/2005 Vendor: http://www.siteenable.com/default.asp Quote from the Vendor: "SiteEnable starts at only $189.00" I could test...

rna_deleter.rgp

RealArcade download My Games 06/13/2001 10:51 RealArcade RealNetworks http://www.real.com Copyright 2001, RealNetworks [email protected] RealGames Server RealGames Server games-dl.real.com /gameconsole/games/demorgses/%f Not used in Beta1 Flux 950258D1-7ABD-4afc-8886-449B98CE8224 1.0 Demo RGI...

Desert Rats vs. Afrika Korps (Haegemonia bug)

Yesterday has been released the multiplayer demo 1.18 of the game Desert Rats vs. Afrika Korps http://www.desertratsgame.com. Also this game as Haegemonia created by the same developers is vulnerable to the same server crash bug. I have updated the advisory and proof-of-concept I released ten day...

Nadeo Game Engine - Remote Denial of Service

Nadeo Game Engine - Remote Denial of Service // source: https://www.securityfocus.com/bid/9604/info It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to...

[Full-Disclosure] TrackMania Demo Denial of Service

TrackMania Demo Denial of Service The original document can be found at http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml .oO Overview Oo. TrackMania Demo Denial of Service Discovered on 2003, November, 30th Vendor: TrackMania Official website http://www.trackmania.com TrackMania i...

Nadeo Game Engine - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9604/info It has been reported that Nadeo Game Engine may be prone to a remote denial of service vulnerability that could allow an attacker to cause the software to crash or hang by sending arbitrary data to the software on TCP port 2350. Nadeo...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...

Several Things about IE bugs

Several Things about IE bugs: 1st, i coded a stable demo of 1stCleanRc: http://www.safecenter.net/UMBRELLAWEBV4/1stCleanRc/1stCleanRc-Xp/index.html some anti-Virus firewall tools may detect this exploit as a virus, but most of these tools will fail if the exploit files are changed.malware also...

Six Step IE Remote Compromise Cache Attack

Six Step IE Remote Compromise Cache Attack tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 Overview A six step cache attack has been found which allows for remote compromise of systems running Internet Explorer merely by viewing a webpage. This attack is possible part...

zenTrack Remote Command Execution Vulnerabilities

Subject: zenTrack Remote Command Execution Vulnerabilities Author: farking [email protected] Product: zenTrack 2.4.1 latest and below Vendor: http://zendocs.phpzen.net/zentrack / http://sourceforge.net/projects/zentrack/ Status: Vendor contacted 27/05/2003 Location:...

i cracked restriction of 'zone' in mozilla.

i cracked restriction of 'zone' in mozilla. "that's all" is the end of file if you are in a hurry tested OS:"Windows Server 2003" NETSCAPE Ver String: "Mozilla/5.0 Windows; U; Windows NT 5.2; zh-CN; rv:1.0.1 Gecko/20020823 Netscape/7.0 " downloaded on "2003/3/31 UTC+800" MOZILLA Ver String:...

ProtWare "HTML Guardian" has pathetic "encryption"

For $40 or $70, ProtWare's "HTML Guardian" http://www.protware.com claims to "encrypt html code and javascripts, making it impossible to reuse them." Unfortunately, "HTML Guardian" does not do anything more than to obfuscate the HTML source code. There is no encryption. In fact, the JavaScript th...

PPTP

For those of you who have a desire to crash Microsoft's PPTP stack, I have a pptp .spk script linked off of http://www.immunitysec.com/spike.html. It would probably be good to run against other PPTP stacks as well. Likewise, SPIKE's msrpcfuzzer takes down free software dce-rpc stacks just as fast...