7331 matches found
GrabIt 1.7.2x - NZB DTD Reference Buffer Overflow
!/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit BY Jeremy Brown [email protected] 05.07.2009 It seems I couldn't gather my resources quickly enough before the first exploit came out.. and it came as no surprise that i...
CVE-2008-6783
SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6783
CVE-2008-6783 describes a SQL injection vulnerability in directory.php of Sites for Scripts (SFS) EZ Home Business Directory. The affected component is the directory list action, where the parameter cat_id can be manipulated to inject SQL commands, enabling remote attackers to execute arbitrary S...
CVE-2008-6783
SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
dWebPro 6.8.26 (DT/FD) Multiple Remote Vulnerabilities
No description provided by source. dWebPro v 6.8.26 ============================================ Remote Directory Tarvelsal && Remote File Disclosure p0c's ============================================ Download : http://www.dwebpro.com/downloads/dwebpro6.8.26.exe...
dwebpro 6.8.26 - Directory Traversal File Disclosure
dwebpro 6.8.26 - Directory Traversal File Disclosure dWebPro v 6.8.26 ============================================ Remote Directory Tarvelsal && Remote File Disclosure p0c's ============================================ Download : http://www.dwebpro.com/downloads/dwebpro6.8.26.exe...
dWebPro 6.8.26 (DT/FD) Multiple Remote Vulnerabilities
Exploit for windows platform in category remote exploits ====================================================== dWebPro 6.8.26 DT/FD Multiple Remote Vulnerabilities ====================================================== dWebPro v 6.8.26 ============================================ Remote Director...
Home Web Server Graphical User Interface Remote Denial Of Service Vulnerability
According to its version number, the remote version of the Home Web Server is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. Attackers can exploit this issue to cause the graphical interface of the server to stop responding, denying servi...
Home Web Server Graphical User Interface Remote Denial Of Service Vulnerability
According to its version number, the remote version of the Home Web Server is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...
OpenJDK allows to list files within the user home directory (6484091)
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...
Home Web Server <= r1.7.1 (build 147) Gui Thread-Memory Corruption
Exploit for unknown platform in category dos / poc ================================================================== Home Web Server = r1.7.1 build 147 Gui Thread-Memory Corruption ================================================================== Home Web Server =r1.7.1 build 147 "Gui...
Ubuntu 7.10 : hplip vulnerability (USN-708-1)
It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root...
Home Web Server r1.7.1 Memory Corruption
Home Web Server =r1.7.1 build 147 "Gui Thread-Memory Corruption Exploit." By: Aodrulez. Homepage : http://downstairs.dnsalias.net/homewebserver.html Product Released : 22.4.2009/21:16:58 Description: This web server when fed with 1006 bytes of chr0x0d,with the html "GET" parameter,the Server's...
MDVA-2008:016 : kdebase
On kdebase as released in Mandriva Linux 2008.0, Khelpcenter could not build an index for the KDE applications manuals, because a required package, htdig, is not in the main repositories. Htdig is now added as suggested package. Also, the Add a network wizard did not show up when browsing the...
FreeBSD : seti@home remotely exploitable buffer overflow (0e154a9c-5d7a-11d8-80e3-0020ed76ef5a)
The seti@home client contains a buffer overflow in the HTTP response handler. A malicious, spoofed seti@home server can exploit this buffer overflow to cause remote code execution on the client. Exploit programs are widely available. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CUPS '_cupsImageReadTIFF()'整数溢出漏洞
BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...
Mandriva Update for kdebase MDVA-2008:016 (kdebase)
Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDVA-2008:016 kdebase Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 9 Update: chmsee-1.0.1-10.fc9
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
Infrastructure attacks: A growing concern
In an essay published on his personal blog doxpara.com, security researcher Dan Kaminsky is starting to sound the alarm about “the extraordinary damage” we face from infrastructure attacks, warning that the industry needs to treat infrastructure with more security due diligence and care. “Forget...