CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

CVE-2011-2764

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...

CVE-2011-2764

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...

360 Web Manager 3.0 - Multiple Vulnerabilities

Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0 Google Dork: "Powered by 360 Web Manager 3.0" Date: 15/04/2011 Author: Ignacio Garrido Contact: [email protected] Software Link: www.360webmanager.com Version: v3.0 Tested on: Linux 2.6.18 Vulnerability description: 360 Web Manager 3....

Elxis CMS eForum 1.1 File Upload

========================================================================== Elxis CMS component eForum v1.1 - Arbitary File Upload Vulnerability ========================================================================== Software: eForum v1.1 Elxis CMS component Vendor: http://www.isopensource.com/...

CMS Balitbang 3.3 Arbitary File Upload Vulnerability

Exploit for php platform in category web applications Software: CMS Balitbang Vendor: www.kajianwebsite.org Vuln Type: Arbitary file upload Download link: http://www.kajianwebsite.org/download/CMS%20versi%203.3.zip Author: eidelweiss contact: eidelweissatwindowslivedotcom Home: www.eidelweiss.inf...

CMS Balitbang 3.3 - Arbitrary File Upload

CMS Balitbang 3.3 - Arbitrary File Upload =================================================================== CMS Balitbang v.3.3 Arbitary file upload vulnerability =================================================================== Software: CMS Balitbang Vendor: www.kajianwebsite.org Vuln Type:...

CMS Balitbang 3.3 - Arbitrary File Upload

=================================================================== CMS Balitbang v.3.3 Arbitary file upload vulnerability =================================================================== Software: CMS Balitbang Vendor: www.kajianwebsite.org Vuln Type: Arbitary file upload Download link:...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 314 MC: 160820 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj, .prfpset, .prexport, .prm,...

TeamViewer 5.0.8703 DLL Hijacking Exploit

/ Exploit Title: TeamViewer define DllExport declspec dllexport BOOL WINAPI DllMain HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved dllhijack; return 0; int dllhijack MessageBox0, "TeamViewer DLL Hijacking!", "DLL Message", MBOK; return 0;...

Bloodshed Dev-C++ 4.9.9.2 Binary Hijacking Exploit

/ Exploit Title: Bloodshed Dev-C++ Binary Hijacking Exploit make.exe, mingw32-make.exe Date: August 25, 2010 Author: storm [email protected] Version: 4.9.9.2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -o make.exe Dev-C++-Binary.c gcc -o mingw32-make.exe Dev-C++-Binary....

Bloodshed Dev-C++ 4.9.9.2 - Multiple EXE Loading Arbitrary Code Executions

// source: https://www.securityfocus.com/bid/42737/info Bloodshed Dev-C++ is prone to a vulnerability that lets attackers execute arbitrary code. This issue affects 'make.exe' and 'minw32-make.exe'. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application...

Adobe Photoshop CS2 - Wintab32.dll DLL Hijacking

Adobe Photoshop CS2 - Wintab32.dll DLL Hijacking / Exploit Title: Adobe Photoshop CS2 DLL Hijacking Exploit Wintab32.dll Date: August 25, 2010 Author: storm [email protected] Version: CS2 9.0 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2...

WebDAV Application DLL Hijacker

This module presents a directory of file extensions that can lead to code execution when opened from the share. The default EXTENSIONS option must be configured to specify a vulnerable application type. Module Options msf use exploit/windows/browser/webdav/dllhijacker msf undefineddllhijacker sho...

Easy RM to MP3 2.7.3.700 (.m3u/.pls/.smi/.wpl/.wax/.wvx/.ram) Exploit

Exploit for windows platform in category local exploits ===================================================================== Easy RM to MP3 2.7.3.700 .m3u/.pls/.smi/.wpl/.wax/.wvx/.ram Exploit ===================================================================== Date: 4 / 8 / 2010 Author: Oh Yaw...

DM Filemanager 3.9.11 Shell Upload

?php / ----------------------------------------------------------------- DM Filemanager fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- Vendor: www.dutchmonkey.com Download :...

Good subtle Bo then burst IIS parsing upload vulnerability-vulnerability warning-the black bar safety net

By. joken's wdlei Recently, webmasters Download Station on a good subtle Bo program and update. Update Time 2 0 1 0 year 7 month 1 3 day, update the skin and modify the upload vulnerabilities, but still exist vulnerabilities. Vulnerability file: UpFileForm. asp Code: html head meta...

VIIShop Online Store V1. 3. 0 fckeditor upload vulnerability-vulnerability warning-the black bar safety net

VIIShop Online Store V1. 3. 0 Fckeditor upload vulnerability can be obtain site permissions. Test method: form id="frmUpload" enctype="multipart/form-data" action="http://www.hackqing.cn/include/fck2/editor/filemanager/upload/php/upload.php?Type=Media" method="post" Upload a new file:br input...

Nakid CMS Remote Shell Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Developers:...