OtsTurntables Free v1.00.047 SEH Overwrite POC

Exploit for unknown platform in category dos / poc ============================================== OtsTurntables Free v1.00.047 SEH Overwrite POC ============================================== Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software...

OtsTurntables Free 1.00.047 - Overwrite (SEH) (PoC)

Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows Vista Ultimate English exploit code print "\n\nBy Darkb0x\n" ; print "Home Page :\n" ; print...

Mandriva Linux Security Advisory : bash (MDVSA-2010:004)

A vulnerability have been discovered in Mandriva bash package, which could allow a malicious user to hide files from the ls command, or garble its output by crafting files or directories which contain special characters or escape sequences CVE-2010-0002. This update fixes the issue by disabling t...

Ofilter Player Crash

!/usr/bin/perl Exploit Title: Ofilter Player skin.ini Local Crash PoC Date:13/01/2010 Author:Vulnerability Discovered By Rehan Ahmed [email protected] Software Link:http://www.008soft.com/products/ofilter-player.htm Tested On: WinXP SP2 my $boom="\x41" x 5000; my $file="skin1.ini"; C:\Program...

CVE-2009-4445

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

CVE-2009-4453: Undefined Security Weakness

Insecure method vulnerability in SoftCab Sound Converter ActiveX control sndConverter.ocx 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information...

phpwind_2.0.1_job.php_任意文件创建漏洞

No description provided by source...

php168 6.0 bencandy.php 任意文件创建漏洞

No description provided by source...

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. A vulnerability has been reported in EMC Captiva PixTools. The flaw is due to unrestricted access to the "SetLogFileName" and "WriteToLog" methods, which attackers c...

CVE-2009-4315: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/ajaxsave.php in Nuggetz CMS 1.0, when magicquotesgpc is disabled, allows remote attackers to create or modify arbitrary files via a .. dot dot in the nugget parameter and a modified pagevalue parameter, as demonstrated by creating and accessing a .php fi...

gAlan - .galan Universal Buffer Overflow

gAlan - .galan Universal Buffer Overflow !/usr/bin/python gAlan .galan file Universal Buffer Overflow Exploit Author : DzAttacker Mail : [email protected] Original : http://www.exploit-db.com/exploits/10339 win32exec - EXITFUNC=process CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.c...

CVE-2009-3898: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...

CVE-2009-3557

The CVE-2009-3557 vulnerability affects PHP 5.2.11 and earlier, and 5.3.x before 5.3.1. It concerns the tempnam function in ext/standard/file.c, which can bypass safe_mode restrictions and allow creation of files in group-writable or world-writable directories via the dir and prefix arguments. Th...

CVE-2009-3557

The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...

CVE-2009-3558: Undefined Security Weakness

The posixmkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass openbasedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file...

CVE-2009-3557: Undefined Security Weakness

The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

Design/Logic Flaw

Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."...

PHP 5.3.0 pdflib Arbitrary File Write

Exploit for unknown platform in category local exploits ===================================== PHP 5.3.0 pdflib Arbitrary File Write ===================================== Title: PHP 5.3.0 pdflib Arbitrary File Write CVE-ID: OSVDB-ID: Author: Sina Yazdanmehr Published: 2009-11-06 Verified: yes view...

CVE-2009-3860: Undefined Security Weakness

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...