Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability

Exploit for php platform in category web applications Spacenuke v3.2.5 = Persistent XSS Exploiable Vulnerability ----------------------------------------------------------- I MEMBER FROM IN3CT0R TEAM. 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage :...

VLC Vulnerabilities handling .AMV and .NSV files

Core Security Technologies - Corelabs Advisory VLC Vulnerabilities handling .AMV and .NSV files 1. Advisory Information Title: VLC Vulnerabilities handling .AMV and .NSV files Advisory ID: CORE-2011-0208 Advisory URL: http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files Date...

NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)

-------------------------- NSOADV-2011-003 --------------------------- Majordomo2 'help' Command Directory Traversal Patch Bypass 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1...

FreeBSD : asterisk -- Exploitable Stack and Heap Array Overflows (65d16342-3ec8-11e0-9df7-001c42d23634)

The Asterisk Development Team reports : The releases of Asterisk 1.4.39.2, 1.6.1.22, 1.6.2.16.2, and 1.8.2.4 resolve an issue that when decoding UDPTL packets, multiple heap based arrays can be made to overflow by specially crafted packets. Systems configured for T.38 pass through or termination...

kernel: possible kernel oops from user MSS

The dotcpsetsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCPMAXSEG aka MSS values, which allows local users to cause a denial of service OOPS via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect u...

Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection

Exploit for php platform in category web applications + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor: http://www.woltlab.com/de/ + Vulnerability hilfsmittel.php?action=read&katid= + Exploitab...

Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection

Woltlab Burning Board 2.3.6 Addon - hilfsmittel.php SQL Injection Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injection Vulnerability + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor:...

Majordomo2 - Directory Traversal (SMTP/HTTP)

Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Special thanks to Dave Miller, Reed Loden and the rest...

Majordomo2 - 'SMTP/HTTP' Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google dork:inurl:mjwwwusr Special thanks to Dave...

Majordomo2 - SMTPHTTP Directory Traversal

Majordomo2 - SMTPHTTP Directory Traversal Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google...

Majordomo2 - Directory Traversal (SMTP/HTTP)

Exploit for multiple platform in category remote exploits Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google dork:inurl:mjwwwusr Special thanks to Dave...

AzeoTech DAQFactory Networking Vulnerabilities

Overview ICS-CERT Advisory ICSA-11-122-01 was originally released to the US-CERT Portal on May 24, 2011. This web site release was delayed to allow users sufficient time to download and install the upgrade. ICS-CERT received a report from the nSense Vulnerability Coordination Team concerning...

Majordomo2 20110121 Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Download:...

Cisco WebEx .atp and .wrf Overflow Vulnerabilities

Core Security Technologies - Corelabs Advisory Cisco WebEx .atp and .wrf Overflow Vulnerabilities 1. Advisory Information Title: Cisco WebEx .atp and .wrf Overflow Vulnerabilities Advisory ID: CORE-2010-1001 Advisory URL:...

NSOADV-2010-010: DATEV Multiple Applications DLL Hijacking Vulnerability

-------------------------- NSOADV-2010-010 --------------------------- DATEV Multiple Applications DLL Hijacking Vulnerability 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 11...

[Onapsis Security Advisory 2011-002] SAP Management Console Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2011-002: SAP Management Console Information Disclosure This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to...

ASPR #2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products

=====BEGIN-ACROS-REPORT===== PUBLIC ======================================================================= ACROS Security Problem Report 2011-01-11-1 ------------------------------------------------------------------------- ASPR 2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products...

PHP Informacion General SQL Injection

===================================================== PHP Informacion General SQL Injection Vulnerability ===================================================== +Title : PHP Informacion General SQL Injection Vulnerability +Software : PHP Informacion General +Vendor : NN +Download : NN +Author :...

Microsoft Windows Fax Services Cover Page Editor (.cov) Memory Corrup

Exploit for windows platform in category dos / poc !load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and...

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption !load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exceptio...