WordPress AdminPanel CSRF/XSS - 0day

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +---------------------------------------------------------------------------+ | SaMuschie Research Labs proudly presents . . . | +---------------------------------------------------------------------------+ | Application: wordpress Version: = 2.1.1 | ...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

CVE-2007-0496

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

CVE-2007-0496

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

CVE-2007-0496

CVE-2007-0496 affects Neon Labs Website (nlws) 3.2 and earlier, with a PHP remote file inclusion in lib/nl/nl.php. The vulnerability occurs when an attacker supplies a URL in the g_strRootDir parameter, enabling remote PHP code execution. The connected sources corroborate the vulnerability descri...

CVE-2007-0496: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

Microsoft Excel Malformed Palette Record DoS PoC (MS07-002)

Exploit for unknown platform in category dos / poc =========================================================== Microsoft Excel Malformed Palette Record DoS PoC MS07-002 =========================================================== """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC...

Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)

Microsoft Excel - Malformed Palette Record Denial of Service PoC MS07-002 """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs whe...

Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)

""" MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs when parsing Palette Record and it causes Heap Overflow check out here -...

Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln

Exploit for unknown platform in category web applications ==================================================================== Neon Labs Website = 3.2 nl.php gstrRootDir Remote Inclusion Vuln ====================================================================...

Neon Labs Website 3.2 - 'nl.php?g_strRootDir' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion

Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

Kaspersky Labs Anti-Virus Local Privilege Escalation Vulnerability

Kaspersky Labs Anti-Virus is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This may facilitate a complete compromise of the affected computer Kaspersky Anti-Virus 6.0 暂无...

Code injection

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...

CVE-2007-0125

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...

[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability

Microsoft Excel Invalid Column Heap Corruption Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...

CVE-2007-0125: Undefined Security Weakness

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...

[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability

Microsoft Excel Long Palette Heap Overflow Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...

Kaspersky AntiVirus扫描引擎PE文件处理拒绝服务漏洞

Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus在处理特制的PE文件时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致扫描引擎陷入死循环。 PE文件中的一个头部结构选项是Optional Windows Header部分，该部分包含有Windows链接器和加载器所需要的信息。NumberOfRvaAndSizes字段的无效值会导致Kaspersky在无限循环中反复地寻找并读取文件的同一部分，这样扫描引擎就会陷入死循环，无法再扫描文件。 Kaspersky Labs Kaspersky Antivirus 6.0 for Windows...