Enomaly ECP/Enomalism Insecure File Creation

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

CUPS symbolic links vulnerability

Insecure /tmp/pdf.log file creation...

NCTVideoStudio 1.6 File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

CVE-2008-5966

CVE-2008-5966 affects Globsy 1.0 and earlier, where globsy_edit.php allows remote attackers to create or overwrite arbitrary files via the file parameter (filename) and data parameter (file contents). Root cause is improper handling of user-supplied filename and content, enabling arbitrary file w...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted:...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit ===================================================================== NCTVideoStudio ActiveX DLLs...

Browser3D 3.5 - .sfs Local Stack Overflow (C)

Browser3D 3.5 - .sfs Local Stack Overflow C include include include / Browser3D local BOF exploit coded by SimO-s0fT [email protected] greetz to: all friends & all morroccan hackers special tnx for str0ke / win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub...

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...

JHead: Multiple vulnerabilities

Background JHead is an exif jpeg header manipulation tool. Description Marc Merlin and John Dong reported multiple vulnerabilities in JHead: A buffer overflow in the DoCommand function when processing the cmd argument and related to potential string overflows CVE-2008-4575. An insecure creation o...

xen security update

CentOS Errata and Security Advisory CESA-2009:0003 Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain th...

VUPlayer Buffer Overflow Exploit

!/usr/bin/perl system"color 3"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename \n"; $file = $ARGV0; print "\n X\n"; print " X VUPLAYER BufferOver flow POC \n"; print " X Coded By AlpHaNiX \n"; print " X From Null Area \n"; print " X\n\n"; print "+ Exploiting.....\n" ; my...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

Destiny Media Player 1.61 - .lst Local Buffer Overflow (3)

Destiny Media Player 1.61 - .lst Local Buffer Overflow 3 !/usr/bin/perl -w exploit coded by Houssamix poc found by aBo MoHaMeD print "===================================================================== \n"; print "Author : Houssamix \n"; print...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2/titlebrbr body h3ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit/h3 !c0d3d by callAX ---- 0wN thE b0x p4l - Greetings to str0ke and Fr0git0...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

Chilkat FTP - ActiveX SaveLastError Insecure Method ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =========================================================== Chilkat FTP ActiveX SaveLastError Insecure Method Exploit =========================================================== ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll...