Stash 1.0.3 Multiple SQL Injection Vulnerabilities

No description provided by source. Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...

Google Chrome任意文件下载漏洞

BUGTRAQ ID: 31000 CNCAN ID：CNCAN-2008090409 Google Chrome是一款Google公司开发的WEB浏览器。 Google Chrome默认下载任意文件无需确定，远程攻击者可以利用漏洞诱使用户下载恶意文件。 构建一个指向任意执行文件的URL，Google Chrome会自动下载到用户计算机并没有任何用户提示，可导致攻击者通过社会工程攻击，下载恶意文件并执行。 Google Chrome 0.2.149 27 目前没有解决方案提供： http://www.google.com/chrome script document.write'ifra...

Automatic File Download vulnerabilities in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новых Automatic File Download уязвимостях в браузере Google Chrome. В браузере Chrome имеются уязвимости, которая позволяют загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Данные две Automatic File...

CVE-2008-3957

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

stash-bypass.txt

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

New Automatic File Download vulnerability in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Automatic File Download уязвимости в браузере Google Chrome. В браузере Chrome имеется уязвимость, которая позволяет загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Уязвимость связана с тегом...

New Automatic File Download vulnerability in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Automatic File Download уязвимости в браузере Google Chrome. В браузере Chrome имеется уязвимость, которая позволяет загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Уязвимость связана с тегом met...

google-chrome-dos1.txt

Google Chrome Crash Script IMC GrahamPhisher.com Shoutz IMC Security Team IMC Tully IMC EXE Shouts To Everyone On The Forums InsaneMasterminds.com Google's new web browser Google Chrome will download files without the user permission. So I came up with a script that will download a file over and...

New Automatic File Download vulnerability in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Automatic File Download уязвимости в браузере Google Chrome. В недавно вышедшем браузере Chrome я обнаружил уязвимость связанную с тегом frame, которая позволяет загружать произвольные файлы, в том числе exe, без предварительного уведомления...

Automatic File Download vulnerability in Google Chrome

Здравствуйте 3APA3A! Сообщаю вам об Automatic File Download уязвимости в браузере Google Chrome. Недавно была обнаружена уязвимость в браузере Chrome связанная с тегом iframe, позволяющая загружать произвольные файлы, в том числе exe, без предварительного уведомления пользователя. Для данной...

Google Chrome 0.2.149.27 - Automatic File Download

Google Chrome 0.2.149.27 - Automatic File Download Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

Exploit for unknown platform in category remote exploits ================================================================ Google Chrome Browser 0.2.149.27 Automatic File Download Exploit ================================================================ Author: nerex E-mail: nerexatlivedotcom...

Google Chrome 0.2.149.27 - Automatic File Download

Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it at your own risk. The author will...

Design/Logic Flaw

The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destinati...

CVE-2008-3879

The CVE-2008-3879 issue affects Ultra Office Control (ActiveX) in OfficeCtrl.ocx 2.0.2008.801 and earlier. The vulnerable components are the Open method (URL argument) and Save method (SaveAsDocument argument). A remote attacker can trick a client into downloading arbitrary files by supplying a U...

linux/x86 connect back, download a file and execute 149 bytes

linux/x86 connect back, download a file and execute 149 bytes. Shellcode exploit for linx86 platform / ;file download shellcode 149 bytes ; ;connect back, download a file and execute. ;modify the name of the file and the ip address first. ; ;militan ;Advanced Defense LabADL ; global start start:...

linux/x86 connect back download a file and execute 149 bytes

No description provided by source. / ;file download shellcode 149 bytes ; ;connect back, download a file and execute. ;modify the name of the file and the ip address first. ; ;militan ;Advanced Defense LabADL ; global start start: xor ecx,ecx mul ecx xor ebx,ebx cdq ;socket push eax push byte 0x1...

CVE-2008-3270

CVE-2008-3270 affects yum-rhn-plugin on Red Hat Enterprise Linux 5. The root cause is that the plugin fails to verify the SSL certificate when contacting the Red Hat Network, enabling a man-in-the-middle to potentially cause a denial of service (loss of updates) or force installation of unrequest...

CVE-2008-3270

yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...