4097 matches found
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: wordpress | Version: = 2.1.1 | Vuln./Exploit Type: SQL-Injection | Status: 0day...
WordPress AdminPanel CSRF/XSS - 0day
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +---------------------------------------------------------------------------+ | SaMuschie Research Labs proudly presents . . . | +---------------------------------------------------------------------------+ | Application: wordpress Version: = 2.1.1 | ...
CVE-2007-0496
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
CVE-2007-0496
CVE-2007-0496 affects Neon Labs Website (nlws) 3.2 and earlier, with a PHP remote file inclusion in lib/nl/nl.php. The vulnerability occurs when an attacker supplies a URL in the g_strRootDir parameter, enabling remote PHP code execution. The connected sources corroborate the vulnerability descri...
CVE-2007-0496
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
Microsoft Excel Malformed Palette Record DoS PoC (MS07-002)
Exploit for unknown platform in category dos / poc =========================================================== Microsoft Excel Malformed Palette Record DoS PoC MS07-002 =========================================================== """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC...
Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)
""" MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs when parsing Palette Record and it causes Heap Overflow check out here -...
Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)
Microsoft Excel - Malformed Palette Record Denial of Service PoC MS07-002 """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs whe...
Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln
Exploit for unknown platform in category web applications ==================================================================== Neon Labs Website = 3.2 nl.php gstrRootDir Remote Inclusion Vuln ====================================================================...
Neon Labs Website 3.2 - 'nl.php?g_strRootDir' Remote File Inclusion
------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion
Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Kaspersky Labs Anti-Virus Local Privilege Escalation Vulnerability
Kaspersky Labs Anti-Virus is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This may facilitate a complete compromise of the affected computer Kaspersky Anti-Virus 6.0 暂无...
Code injection
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...
CVE-2007-0125
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...
[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability
Microsoft Excel Invalid Column Heap Corruption Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...
[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability
Microsoft Excel Long Palette Heap Overflow Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...
Kaspersky AntiVirus扫描引擎PE文件处理拒绝服务漏洞
Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus在处理特制的PE文件时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致扫描引擎陷入死循环。 PE文件中的一个头部结构选项是Optional Windows Header部分，该部分包含有Windows链接器和加载器所需要的信息。NumberOfRvaAndSizes字段的无效值会导致Kaspersky在无限循环中反复地寻找并读取文件的同一部分，这样扫描引擎就会陷入死循环，无法再扫描文件。 Kaspersky Labs Kaspersky Antivirus 6.0 for Windows...
Interview:USSR
USSR Labs USSR Labs their website , their slogan is "USSR is back", that is, "USSR is back", their symbol is a bulldog in a strict collar broke into the world of computer security relatively recently, but very decisive. Somewhere, probably last fall interview taken in 2000 - editor's note, they...