CVE-2009-0167

Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...

CVE-2008-5908

Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455...

CVE-2008-5910

The CVE-2008-5910 entry concerns an unspecified vulnerability in txzonemgr of Sun OpenSolaris, described as a “Temporary file vulnerability.” Affected component: txzonemgr, Sun OpenSolaris. Root cause and impact are not fully detailed beyond “unknown impact” in the description, with the vulnerabi...

CVE-2008-5908

CVE-2008-5908 concerns an unspecified vulnerability in the root/boot archive tool of Sun OpenSolaris, tied to a “Temporary file vulnerability” (Bug ID 6653455). Available sources indicate unknown impact and local attack vectors, with no concrete exploit details provided in the connected documents...

OpenJDK Privilege escalation in command line applications (6733959)

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

Browse3D 3.5 (.sfs File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== Browse3D 3.5 .sfs File Local Buffer Overflow PoC ================================================== !/usr/bin/perl -w -- Viva Gazza -- Viva Palestine -- Browse3D v3.5 .sfs File Local Buffer...

CVE-2008-5354

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

CVE-2008-5332

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

ClamAV < 0.94.2 (JPG File) Stack Overflow PoC

No description provided by source. const char crashstr = "\xff\xd8" // jpg marker "\xff\xed" // exif data "\x00\x02" // length "Photoshop 3.0\x00" "8BIM" "\x04\x0c" // thumbnail id "\x00" "\x01" "\x01\x01\x01\x01" "0123456789012345678912345678"; // skip over 28 bytes include stdio.h include...

CVE-2008-5138

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...

CVE-2008-5008

Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...

EUVD-2008-4801

Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy...

CVE-2008-4473

Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...

Heap overflow

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

DSA-1643-1 feta - denial of service

Bulletin has no description...

EUVD-2008-4304

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

CVE-2008-3940

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

Php168 read arbitrary file vulnerability-vulnerability warning-the black bar safety net

Reprint address: http://hi.baidu.com/saiyhi/ Oh, forgot to say, the program official URL: http://www.php168.com/ 代码 :..job.php Line:1 1 7 if eregi". php",$url die"ERR"; $fileurl=strreplace$webdbwwwurl,"",$url; ifisfilePHP168PATH."$ fileurl"&&filesizePHP168PATH."$ fileurl"1 0 2 41 0 2 45 0 0...

K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting

Overview analysis.cgi included in K's CGI Access Log Kaiseki Jcode.pm contains a cross-site scripting vulnerability. K's CGI Access Log Kaiseki is a program to analyze access to a web page. analysis.cgi included in Access Log Kaiseki Jcode.pm contains a cross-site scripting vulnerability. The...