ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...

ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

ULoki Community Forum v2.1 (usercp.php) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= ULoki Community Forum v2.1 usercp.php XSS Vulnerability ========================================================= Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site...

ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Uiga Business Portal Cross Site Scripting / SQL Injection

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

Uiga Business Portal - SQL Injection / Cross-Site Scripting

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

Uiga Business Portal SQL/ XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Uiga Business Portal SQL/ XSS Vulnerability =========================================== Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site :...

Uiga Business Portal - SQL Injection Cross-Site Scripting

Uiga Business Portal - SQL Injection Cross-Site Scripting Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linu...

iDefense Security Advisory 01.12.10: Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability

iDefense Security Advisory 01.12.10 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 12, 2010 I. BACKGROUND Adobe Reader and Acrobat are Portable Document Format PDF reader and processors. For more information, please visit following pages: http://www.adobe.com/products/reader/...

monkey -- improper input validation vulnerability

Census Labs reports: We have discovered a remotely exploitable "improper input validation" vulnerability in the Monkey web server that allows an attacker to perform denial of service attacks by repeatedly crashing worker threads that process HTTP requests...

Mozilla Codesighs - Memory Corruption

!/usr/bin/perl thedailyshow.pl AKA Mozilla Codesighs Memory Corruption PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.12.2009 257 while0 == retval && NULL != fgetslineBuffer, sizeoflineBuffer, inOptions-mInput gdb 259 trimWhitelineBuffer; gdb trimWhite...

iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability

iDefense Security Advisory 12.08.09 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2009 I. BACKGROUND WordPad is the default text editing application included with nearly all Windows versions since Windows 95. The Word97 converter is used to convert Word documents into the format...

CVE-2009-3586: CoreHTTP web server off-by-one buffer overflow vulnerability

census ID: census-2009-0003 URL: http://census-labs.com/news/2009/12/02/corehttp-web-server/ CVE ID: CVE-2009-3586 Affected Products: CoreHTTP web server versions = 0.5.3.1. Class: Improper Input Validation CWE-20, Failure to Constrain Operations within the Bounds of a Memory Buffer CWE-119 Remot...

Novell eDirectory 8.8 SP5 HTTPSTK Stack Overflow

!usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net use WWW::Mechanize; use LWP::Debug qw+; use HTTP::Cookies; use HTTP::Request::Common;; $target=$ARGV0; if!$ARGV0 print "Novell...

Novell eDirectory - HTTPSTK Login Stack Overflow

Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability Date: 2009-11-17 Author: karak0rsan Software Link: downoad link if available Version: Novell eDirectory 8.8 SP5 HTTPSTK Tested on: relevant os Code : exploit code !usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln -...

Novell eDirectory 8.8 SP5 iConsole Buffer Overflow

!/usr/bin/python Novell eDirectory 8.8 SP5 iConsole BOF Vulnerability found by Hellcode Labs, Original POC http://downloads.securityfocus.com/vulnerabilities/exploits/36815.pl Exploit coded by Matteo Memelli | ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce -...

Novell eDirectory 8.8 SP5 - iConsole Buffer Overflow

Novell eDirectory 8.8 SP5 - iConsole Buffer Overflow !/usr/bin/python Novell eDirectory 8.8 SP5 iConsole BOF Vulnerability found by Hellcode Labs, Original POC http://downloads.securityfocus.com/vulnerabilities/exploits/36815.pl Exploit coded by Matteo Memelli | ryujin A-T offensive-security.com...

Novell eDirectory 8.8 SP5 iConsole Buffer Overflow

Exploit for unknown platform in category remote exploits ================================================== Novell eDirectory 8.8 SP5 iConsole Buffer Overflow ================================================== Title: Novell eDirectory 8.8 SP5 iConsole Buffer Overflow CVE-ID: OSVDB-ID: Author:...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

iDefense Security Advisory 11.10.09: Microsoft Excel FEATHEADER Record Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 11.10.09 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 10, 2009 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is availabl...