PHP < 5.2.13 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation

source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue to create arbitrary files, which may then be executed to perform unauthorized...

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue...

Winamp 5.572 Exploit - SEH

Exploit for unknown platform in category local exploits ========================== Winamp 5.572 Exploit - SEH ========================== !/usr/bin/python Exploit Title: Winamp email protected:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error ...

yPlay 1.0.76 Proof Of Concept

!/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print "\n"; print "! yPlay 1.0.76 .mp3 Local Crash PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1337; my $filename = "b00m.mp3"; open FILE,"$filename"; print FILE...

yPlay 1.0.76 - .mp3 Local Crash (PoC)

yPlay 1.0.76 - .mp3 Local Crash PoC !/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print "\n"; print "! yPlay 1.0.76 .mp3 Local Crash PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1337; my $filename = "b00m.mp3...

DJ Studio Pro 5.1.6.5.2 Stack Overflow

!/usr/bin/perl Usage--file created--load file--b00m.pls BOOM print "\n"; print "! DJ Studio Pro 5.1.6.5.2 .pls Local Stack Overflow Exploit\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1500; my $filename = "b00m.pls"; open...

phpMyAdmin <2.11.10 创建不安全文件和目录漏洞

No description provided by source...

Mandriva Update for bash MDVSA-2010:004 (bash)

Check for the Version of bash OpenVAS Vulnerability Test Mandriva Update for bash MDVSA-2010:004 bash Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

OtsTurntables Free v1.00.047 SEH Overwrite POC

Exploit for unknown platform in category dos / poc ============================================== OtsTurntables Free v1.00.047 SEH Overwrite POC ============================================== Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software...

OtsTurntables Free 1.00.047 - Overwrite (SEH) (PoC)

OtsTurntables Free 1.00.047 - Overwrite SEH PoC Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows Vista Ultimate English exploit code print...

OtsTurntables Free 1.00.047 - Overwrite (SEH) (PoC)

Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows Vista Ultimate English exploit code print "\n\nBy Darkb0x\n" ; print "Home Page :\n" ; print...

Ofilter Player Crash

!/usr/bin/perl Exploit Title: Ofilter Player skin.ini Local Crash PoC Date:13/01/2010 Author:Vulnerability Discovered By Rehan Ahmed [email protected] Software Link:http://www.008soft.com/products/ofilter-player.htm Tested On: WinXP SP2 my $boom="\x41" x 5000; my $file="skin1.ini"; C:\Program...

Mandriva Linux Security Advisory : bash (MDVSA-2010:004)

A vulnerability have been discovered in Mandriva bash package, which could allow a malicious user to hide files from the ls command, or garble its output by crafting files or directories which contain special characters or escape sequences CVE-2010-0002. This update fixes the issue by disabling t...

CVE-2009-4445

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

php168 6.0 bencandy.php 任意文件创建漏洞

No description provided by source...

phpwind_2.0.1_job.php_任意文件创建漏洞

No description provided by source...

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. A vulnerability has been reported in EMC Captiva PixTools. The flaw is due to unrestricted access to the "SetLogFileName" and "WriteToLog" methods, which attackers c...

gAlan - .galan Universal Buffer Overflow

gAlan - .galan Universal Buffer Overflow !/usr/bin/python gAlan .galan file Universal Buffer Overflow Exploit Author : DzAttacker Mail : [email protected] Original : http://www.exploit-db.com/exploits/10339 win32exec - EXITFUNC=process CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.c...