9454 matches found
Süper News v1.0 Remote SQL Injection Vulnerability
My Bug Formate .txt Link : http://www.turkishfrm.com/news/daa.txt By bug : Title : Sper News v1.0 Remote SQL Injection Vulnerability AuthoR : CilginHaCKer cen0x [email protected] WebSite : http://cilginizm.ch Download : http://www.aspturkiye.com/detay.asp?fldAuto=796 Expl0it :...
CUPS: Integer overflow vulnerability
Background CUPS provides a portable printing layer for UNIX-based operating systems. Description Thomas Pollet reported a possible integer overflow vulnerability in the PNG image handling in the file filter/image-png.c. Impact A malicious user might be able to execute arbitrary code with the...
Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability
Exploit for unknown platform in category web applications ============================================================ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability ============================================================...
BSD (Multiple Distributions) - 'strfmon()' Integer Overflow
// source: https://www.securityfocus.com/bid/28479/info Multiple BSD platforms are prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts wil...
[DSECRG-08-020] RFI-LFI in PowerClan 1.14a
DSECRG-08-020 Digital Security Research Group DSecRG Advisory Application: PowerClan Versions Affected: 1.14a Vendor URL: http://www.powerscripts.org/ Bug: Remote/Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: ..2008 Author:...
CORE-2008-0123: Leopard Server Remote Path Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:...
AST-2008-002: Two buffer overflows in RTP Codec Payload Handling
Asterisk Project Security Advisory - AST-2008-002 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Two buffer overflows in RTP Codec Payload | | | Handling |...
RecurityLabs_Cisco_ACS_UCP_advisory.txt
Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...
Java Web Start tempbuff Stack Buffer Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Web Start. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the useEncodingDecl function used while...
CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...
Minigal 2 critical XSS
Title: Minigal 2 critical XSS Author: Jose Carlos Norte [email protected] Date: 4-3-2008 Severity: high Vendor URL: http://www.minigal.dk/ ------- Introduction Minigal 2a.k.a. MG2 is a picture album written in PHP, it have a simple administration panels, and makes non-ajax browsable albums. -------...
SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities ===================================================================...
sbe-rfi.txt
--==+================================================================================+==-- --==+ SiteBuilderElite1.2 Multiple Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: SiteBuilderElite1.2 Multiple...
Path Traversal vulnerability in VMware's shared folders implementation
Path Traversal vulnerability in VMware's shared folders implementation Core Security Technologies - CoreLabs Advisory Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementation Advisory ID: CORE-2007-0930 Advisory URL:...
Core Security Technologies Advisory 2007.0930
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Path Traversal vulnerability in VMware's shared folders implementation Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementati...
Unfixed XSS vulnerability at www.familysecuritymatters.org
Security researcher APS, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.familysecuritymatters.org, which at the time of submission ranked 336414 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It ...
SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2008-001 Advisory Title: Lyris ListManager - Multiple Vulnerabilities Author: Tyler Shields [email protected] Release Date: Wednesday, Januar...
lookstrike-rfilfi.txt
--==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 Remote\Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: LookStrike Lan Manager v0....
Directory traversal and DoS in WinIPDS G52-33-021
Luigi Auriemma Application: Intermate WinIPDS http://www.intermate.com/ipdssoftware Versions: = Release 3.3 Revision G52-33-021 Platforms: Windows Bugs: A directory traversal in web administration B Denial of Service versus the IPDS port Exploitation: remote Date: 12 Feb 2008 Author: Luigi Auriem...
IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow
IOActive Security Advisory Title: Multiple Buffer Overflows in Legacy modjk2 = 2.0.3-DEV Severity: High Date Discovered: 05.01.2007 Date Reported: 06.27.2007 Date Disclosed: 09.20.2007 Affected Products: modjk2 = v2.0.3-DEV F5 BIG-IP = 9.2.3.30 Other versions were not tested Synopsis: IOActive ha...