Stack overflow

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library ATL, as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Arbitrary Delete Message Vulnerability =========================================================== !/usr/bin/perl -w Messages Library 2.0 ; $b =...

Messages Library 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Insecure Cookie Handling Vulnerability =========================================================== Messages Library 2.0 = Arbitrary Database Download...

Messages Library 2.0 - Insecure Cookie Handling

Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec http://localhost/sms/admin/backup.p...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Refer : mu-b Exploited by : His0k4 Greetings : All...

Evernew Free Joke Script 1.2 - Remote Change Password

Evernew Free Joke Script 1.2 - Remote Change Password Remote Change Password = Bug detail bug in change.php file in line 10 : $result=mysqlquery"update admin set password='$pass'"; ----------------------- = Fix $result=mysqlescapestring"update admin set password='$pass'"; change mysqlquery to...

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles / Httpdx Server FTP v0.8 Remote Arbitrary Directories & files Vulnerability ------------------------------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when...

Design/Logic Flaw

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as...

nagios -- Command Injection Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the "ping" parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploite...

CVE-2009-1807

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009...

CVE-2009-1800

Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May 2009. NOTE: some of...

Kensei Board <= 2.0.0b Multiple SQL Injection Vulnerabilities

No description provided by source. Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforu...

Kensei Board 2.0.0b SQL Injection

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board 2.0.0b - Multiple SQL Injections Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction =...

Kensei Board <= 2.0.0b Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Kensei Board = 2.0.0b Multiple SQL Injection Vulnerabilities ============================================================= Kensei Board = 2.0.0b Multiple Remote SQL Injection...

wireshark -- PCNFSD Dissector Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in Wireshark, which can be exploited by malicious people to cause a DoS. The vulnerability is caused due to an error in the PCNFSD dissector and can be exploited to cause a crash via a specially crafted PCNFSD packet...

httpdx 0.5b - FTP Server (CWD) Remote Buffer Overflow (SEH)

httpdx 0.5b - FTP Server CWD Remote Buffer Overflow SEH !/usr/bin/python Usage : httpdxcwd.py targetip user pass Example : httpdxcwd.py 192.168.1.3 ftp 123 Stack encouraged me to exploit this bug , so thx brotha | || | / \ | | | | | | | | | - " %sys.argv0 sys.exit0 skape's egghunter shellcode...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

HP-UX Update for ftp and ftpd HPSBUX00162

Check for the Version of ftp and ftpd OpenVAS Vulnerability Test HP-UX Update for ftp and ftpd HPSBUX00162 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...