Browser3D 3.5 - .sfs Local Stack Overflow (C)

Browser3D 3.5 - .sfs Local Stack Overflow C include include include / Browser3D local BOF exploit coded by SimO-s0fT [email protected] greetz to: all friends & all morroccan hackers special tnx for str0ke / win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub...

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...

JHead: Multiple vulnerabilities

Background JHead is an exif jpeg header manipulation tool. Description Marc Merlin and John Dong reported multiple vulnerabilities in JHead: A buffer overflow in the DoCommand function when processing the cmd argument and related to potential string overflows CVE-2008-4575. An insecure creation o...

xen security update

CentOS Errata and Security Advisory CESA-2009:0003 Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain th...

VUPlayer Buffer Overflow Exploit

!/usr/bin/perl system"color 3"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename \n"; $file = $ARGV0; print "\n X\n"; print " X VUPLAYER BufferOver flow POC \n"; print " X Coded By AlpHaNiX \n"; print " X From Null Area \n"; print " X\n\n"; print "+ Exploiting.....\n" ; my...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

Destiny Media Player 1.61 - .lst Local Buffer Overflow (3)

Destiny Media Player 1.61 - .lst Local Buffer Overflow 3 !/usr/bin/perl -w exploit coded by Houssamix poc found by aBo MoHaMeD print "===================================================================== \n"; print "Author : Houssamix \n"; print...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2/titlebrbr body h3ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit/h3 !c0d3d by callAX ---- 0wN thE b0x p4l - Greetings to str0ke and Fr0git0...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

Chilkat FTP - ActiveX SaveLastError Insecure Method ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =========================================================== Chilkat FTP ActiveX SaveLastError Insecure Method Exploit =========================================================== ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Constructr CMS = 3.02.5 Stable Multiple Remote Vulnerabilities =============================================================== Constructr CMS http://constructr-cms.org/ - =...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfil...

CentOS 3 : kernel (CESA-2008:0973)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

GLSA-200812-12 : Honeyd: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200812-12 Honeyd: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the 'test.sh' script. Impact : A local attacker could perform symlink attacks and overwrite arbitrary files wit...

chm2pdf Insecure Temporary File Creation or DoS Vulnerability

This host is installed with chm2pdf and is prone to Insecure Temporary File Creation or Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbchm2pdfinsectmpfilecrtnvuln.nasl 4218 2016-10-05 14:20:48Z teissa $ chm2pdf Insecure Temporary File Creation or DoS Vulnerability Authors:...