CVE-2010-2630

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22420 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site Scripti...

PHPCMS2008 1 0 0 5 2 7 version website management system to download an arbitrary file vulnerability-vulnerability warning-the black bar safety net

Phpcms is a PHP-based+Mysql architecture of the web content management system, it is an open-source PHP development platform. Phpcms uses a modular approach to the development, functional and easy to use to facilitate the expansion, for medium to large sites provide heavyweight website Building...

Easy room search system type injection exploit-vulnerability warning-the black bar safety net

This system is a housing transactions, rental of the system. Vulnerability file: searchsell. asp; the searchhire. asp; the searchbuy. asp conn. asp Keyword inurl: efwmanager; the inurl: the searchhire. asp; and inurl: in subhack. asp? This keyword is a bit much By Macromedia Dreamweaver the searc...

CVE-2010-1880

CVE-2010-1880 corresponds to the MS10-033 Windows DirectShow MJPEG media decompression vulnerability. Affected component is Quartz.dll/DirectShow used by Windows media handling on Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1, and Server 2008. The flaw allows remote code execution when...

mysqldumper Local File Vulnerability

Exploit for php platform in category web applications ==================================== mysqldumper Local File Vulnerability ==================================== mysqldumper Local File Vulnerability Software : all version Software site: : http://www.mysqldumper.net/ Author : tetikci $ miktolyn...

Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 Multiple Local File Vulnerability

Exploit for php platform in category web applications ======================================================================= Pepsi CMS Irmin cms pepsi-0.6-BETA2 Multiple Local File Vulnerability ======================================================================= Pepsi CMS Irmin cms...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-4676

CVE-2009-4676 affects JetAudio/Jetaudio JetCast: JetCast.exe 2.0.4.1109 is vulnerable in JetAudio 7.5.2 and 7.5.3.15 due to a stack-based buffer overflow triggered by a long title in a FLAC file. The issue permits remote code execution and is documented with a CVSSv2 base score of 9.3 (NETWORK ve...

Design/Logic Flaw

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

Radasm v2.2.1.6 .rap file Local Buffer Overflow PoC

No description provided by source. /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / includestdio.h void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char; void...

Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

CVE-2009-4488

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...

CVE-2009-4496

Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2009-4495

Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2009-3930

The connected records confirm CVE-2009-3930 affects the Christos Zoulas file parser prior to version 5.02. The issue is described as multiple integer overflows triggered while processing a malformed Compound File (CDF) document, which can lead to a buffer overflow. The impact is stated as unspeci...

PHP168 background check/modify any file vulnerability-vulnerability warning-the black bar safety net

Vulnerability information: Affect the program:PHP168 all take template edit version Author:esnra Released on:http://www.3hack.com Use Conditions:have permission to enter the background Using the method: Into the function centre,find the style/template settings,selected style management ! 文章 来自...

Buffer overflow

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

CVE-2009-3807

Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service crash via a long string in a .vib file...

BulletProof FTP 2.63 b56 Client Malformed '.bps' File Stack Buffer Overflow

No description provided by source. / BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200...