CVE-2009-4898

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

CVE-2010-1325

Cross-site request forgery CSRF vulnerability in the apache2-slms package in SUSE Lifecycle Management Server SLMS 1.0 on SUSE Linux Enterprise SLE 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources...

Rootkit Variant Now Targets 64-Bit Windows

Alureon rootkit is back, and has acquired the ability to hijack computers running 64-bit versions of Microsoft Windows, proclaimed security researcher Marco Giuliani. Read the full article. Help Net Security...

KLA10328 ACE vulnerability in Skype

An untrusted path was found in Skype. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a DLL hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10435 ACE vulnerability in Adobe Photoshop

An untrusted path was found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited on the network via a DLL hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10413 ACE vulnerability in Avast! Free Antivirus

An untrusted path vulnerability was found in Avast! Free Antivirus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability...

Media Player Classic 1.3.2189.0 DLL Hijacking Exploit

/ Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types in the same directory of the dll Affected types: m2ts, m2t,...

KLA10424 ACE vulnerability in uTorrent

An untrusted path vulnerability was found in uTorrent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10361 ACE vulnerability in TeamViewer

An untrusted path vulnerability was found in TeamViewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related product...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators...

CVE-2009-4981

Multiple cross-site request forgery CSRF vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators...

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking / Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types ...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== Acunetix Web Vulnerability Scanner DLL Hijacking Exploit ======================================================== // Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Dat...

Mediaplayer Classic 1.3.2189.0 DLL Hijacking Exploit (iacenc.dll)

Exploit for windows platform in category local exploits ================================================================= Mediaplayer Classic 1.3.2189.0 DLL Hijacking Exploit iacenc.dll ================================================================= / Mediaplayer Classic 1.3.2189.0 Dll Hijack...

VideoLAN VLC Media Player 1.1.3 - 'wintab32.dll' DLL Hijacking

Exploit Title: VLC Player DLL Hijack Vulnerability Date: 25 Aug 2010 Author: Secfence Version: VLC Tested on: Windows XP Place a .mp3 file and wintab32.dll in same folder and execute .mp3 file in vlc player. Code for wintab32.dll: /----------/ / wintab32.cpp / include "stdafx.h" include "dragon.h...

WebDAV Application DLL Hijacker

$Id: webdavdllhijacker.rb 10101 2010-08-23 13:41:59Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant administrative privileges...

CVE-2010-3026

Cross-site request forgery CSRF vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant administrative privileges...

Nagios XI 2009R1.2B Cross Site Request Forgery

Advisory Information Advisory ID: NGENUITY-2010-006 Date published: Aug. 7, 2010 Class: Cross-Site Request Forgery CSRF Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description Nagios XI 2009R1.2B is vulnerable to multiple...