509 matches found
Immunity Canvas: AIXCMSD
Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...
Another Linux Kernel Flaw Emerges
Researchers have identified a new vulnerability in the Linux kernel which could enable an attacker to take complete control of a vulnerable system. The flaw is in all versions of the 2.4 and 2.6 Linux kernels. The Linux kernel vulnerability is a NULL pointer dereference vulnerability that derives...
BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability
BaoFeng Storm is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari 4.x JavaScript Reload Remote Crash Exploit
No description provided by source. Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: -...
Apple Safari 4.x - JavaScript Reload Remote Crash
Apple Safari 4.x - JavaScript Reload Remote Crash Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.200...
Apple Safari 4.x Crash Exploit
Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: - Safari 4.0 at Windows XP SP3 - Safa...
Apple Safari 4.x JavaScript Reload Remote Crash Exploit
Exploit for multiple platform in category dos / poc ======================================================= Apple Safari 4.x JavaScript Reload Remote Crash Exploit ======================================================= Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut...
XOOPS 2.3.3 - .htaccess Remote File Disclosure
XOOPS 2.3.3 - .htaccess Remote File Disclosure ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De...
T-Mobile data on Full Disclosure is real
T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...
Phorum Cross Site Scripting / Request Forgery
=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...
net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities
No description provided by source. =cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID:...
net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities
Exploit for linux platform in category remote exploits ==================================================================== net2ftp = 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities ==================================================================== / / / / // / / // / o / / .-/ =net2f...
net2ftp 0.97 - Cross-Site Scripting Request Forgery
net2ftp 0.97 - Cross-Site Scripting Request Forgery =cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804...
net2ftp 0.97 XSS / XSRF
=cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804 Advisory URL:...
SMF 1.1.7 Persistent XSS (requires permision to edit censor)
SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...
Opera 9.50 9.61 historysearch Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ requir...
Nokia Mini Map Browser (array sort) Silent Crash Vulnerability
No description provided by source. ==================================================== Security Research Advisory Vulnerability name: Nokia Browser Array Sort Denial Of Service Vulnerability Advisory number: LC-2008-04 Advisory URL: http://www.ikkisoft.com...
Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration
As of today 25 September 2008, I am using the latest 1.0.3.7 firmware for my region Singapore, US also use this version. 1/ Outdated Samba 3.0.2, vulnerable to numerous security holes. 2/ Default admin:admin user 3/ Default open guest user, noway to disable it 4/ It is impossible to disable SAMBA...
Mercur Mailserver/Messaging <= 5.0 IMAP Overflow Vulnerability
The Mercur IMAP4 Service running on the host is vulnerable to buffer overflows by sending a special crafted SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
WebCT 4.x Javascript Session Stealer
WebCT 4.x Javascript Session Stealer Exploits Software: WebCT Campus Edition 4.x http://secunia.com/product/3280/ Affected Version: 4.1.5.8 Discoverer: Benjamin "balupton" Lupton Date Discovered: November 2005 Date Reported: 25/06/2007 Software Author Contacted again on: 20/07/2007 Date Published...