PT-2014-8225

Name of the Vulnerable Software and Affected Versions Anahi A Adopter FR aka com.wAnahiAAdopterFR version 0.1 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

voiture.brick7.fr XSS vulnerability

Open Bug Bounty ID: OBB-49198 Description| Value ---|--- Affected Website:| voiture.brick7.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Wordpress Font Uploader Plugin 1.2.4 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date : 01-06-2012 Google Dork :...

Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (3)

No description provided by source. !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the...

URL Shortener Script 1.0 - SQL Injection Vulnerability

No description provided by source. =================================================================================== url shortener script 1.0 sql injection Vulnerabilities =================================================================================== Exploit Title: url shortener script 1.0...

Linux x86 - execve /bin/sh - 21 bytes

No description provided by source. / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = \x6a\x0b // push byte +0xb \x58 // pop eax \x99 // cdq \x52 // push edx...

BlazeDVD 6.0 - (.plf) SEH universale Buffer Overflow

No description provided by source. Exploit Title : BlazeDVD v6 .plf SEH universale Buffer Overflow tested on windows xp SP 3 FR Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : my $file= MadjiX.plf; my $junk=\x41 x 608; my $nseh=\xeb\x06\x90\x90; my $seh= pack'V',0x100157F...

PSOProxy 0.91 Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9706/info It has been reported that PSOProxy is prone to a remote buffer overflow vulnerability. The issue is due to the insufficient boundary checking. A malicious user may exploit this condition to potentially corrupt...

Fedora 19 : php-5.5.7-1.fc19 (2013-23208)

12 Dec 2013, PHP 5.5.7 CLI server : - Added some MIME types to the CLI web server Chris Jones - Implemented FR 65917 getallheaders is not supported by the built-in web server - also implements apacheresponseheaders Andrea Faulds Core : - Fixed bug 66094 unregistertickfunction tries to cast a...

Updated file-roller package fixes CVE-2013-4668

Updated file-roller package fixes security vulnerability: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4 when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, relat...

CVE-2013-4668

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...

PT-2013-5119

Name of the Vulnerable Software and Affected Versions File Roller versions 3.6.x through 3.6.3 File Roller versions 3.8.x through 3.8.2 File Roller versions 3.9.x through 3.9.2 Description The issue allows remote attackers to create arbitrary files via a crafted archive that is not properly handl...

CVE-2013-4668: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...

PayPal Cross Site Scripting

====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ \ /|| ||/ // || || / / || ======================================================================= Hello I...

Zimplit CMS 3.0 - Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53990/info Zimplit CMS is prone to multiple local file-include vulnerabilities and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context...

AlegroCart FredCK-Editor (ASPELL for WinSRV) Remote Command Exec

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

sos security, bug fix, and enhancement update

1.7-9.62.0.1.el5 - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile 1.7-9.62 - Always log plugin exceptions that are not raised to the interpreter Resolves: bz717480 - Ensure relative...

Unfixed XSS vulnerability at www.n9.fr

Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.n9.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

Unfixed XSS vulnerability at w3.u-grenoble3.fr

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting w3.u-grenoble3.fr, which at the time of submission ranked 293797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

Unfixed XSS vulnerability at www.math.u-bordeaux1.fr

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.math.u-bordeaux1.fr, which at the time of submission ranked 72689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...