1393 matches found
vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks
No description provided by source. vBSEO - Persistent XSS via LinkBacks http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/ Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and t...
Gene6 G6 FTP Server 2.0 - Buffer Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a...
Joomla Component com_ranking SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comranking SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-05 InformatioN Title : Joomla Component comranking SQL Injection Vulnerability Author : DevilZ TM By D3v1l.blackhat Homepage : http://www.DEVILZTM.com Email :...
Yahoo! Messenger 8.1 KDU_V32M.DLL - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects Yahoo!...
Microsoft Windows SeImpersonatePrivilege - Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28833/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow authenticated users to elevate their privileges to NetworkService. This allows attackers to execute code with...
eDisplay Personal FTP server 1.0.0 - Multiple Post-Authentication Crash SEH (PoC)
No description provided by source. Title: eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link:...
PHP <= 5.3.1 - LCG Entropy Security Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38430/info PHP is prone to a security vulnerability that affects LCG Linear Congruential entropy. Attackers can exploit this issue to steal sessions or other sensitive data. Versions prior to PHP 5.2.13 are affected...
bcoos 1.0.10 /myalbum/ratephoto.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. These...
Microsoft Windows Kernel Intel x64 SYSRET PoC
No description provided by source. Source: http://packetstormsecurity.org/files/115908/sysret.rar This is proof of concept code that demonstrates the Microsoft Windows kernel Intel/x64 SYSRET vulnerability as described in MS12-042. The shellcode disables code signing and will grant NT SYSTEM...
MS14-012 Internet Explorer CMarkup Use-After-Free
No description provided by source. !-- MS14-012 Internet Explorer CMarkup Use-After-Free Vendor Homepage: http://www.microsoft.com Version: IE 10 Date: 2014-03-31 Exploit Author: Jean-Jamil Khalife Tested on: Windows 7 SP1 x64 fr, en Flash versions tested: Adobe Flash Player 12.0.0.70, 12.0.0.77...
Adobe Reader - util.printf() JavaScript Function Stack Overflow Exploit
No description provided by source. Adobe Reader 'util.printf' JavaScript Function Stack Buffer Overflow Exploit author: Elazar http://exploit-db.com/sploits/2008-APSB08-19.pdf milw0rm.com 2008-11-05...
Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution
No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 Binary Analysis | | | | || / \ || | | | || ||// \/|/ Title : Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Version : UfPBCtrl.DLL...
Apache 1.2 Web Server DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2216/info Apache Web Server 1.2 and previous versions are subject to a denial of service. By requesting a malformed GET request composed of an unusually large number of '/' characters, an attacker can cause CPU usage to...
Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (MS09-050)
No description provided by source. Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista SP2/SP1 only, should be reliable! Tested on: Vista sp2...
IP2location.dll 1.0.0.1 - Function Initialize() Buffer Overflow
No description provided by source. html head titleIP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r/title /head body object classid='clsid:A3C8BFFA-1496-4188-A2BC-355A0B3DA0A7' id='ip2location'/object script language=JavaScript / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow...
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
No description provided by source. Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is...
Microsoft Outlook Express 6.0 MHTML Forced File Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component...
Fat Player Media Player 0.6b0 Buffer Overflow
No description provided by source. $Id: fatplayerwav.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Opera 10.10 (XML parser) Denial of Service PoC
No description provided by source. From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special thanks to peter Van Eeckhoutte after opening the opera.html broswer hang for a while and crush.same bug in firefox too :d This vulnerability cause a denia...
Simply Sites RGV Local File Inclusion
No description provided by source. Title : Simply Sites RGV Local File Inclusion Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Simply Sites RGV Local File Inclusion Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected] Contact :...