Shoutcast server buffer overflow

Buffer overflow in DNAS Relay service on master server reply parsing...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

Design/Logic Flaw

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-5419

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

CVE-2008-5419: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/blog.php?user= REAL USER NAME HERE...

Vlog System 1.1 - SQL Injection

Vlog System 1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞

BUGTRAQ ID: 32389 EMC ControlCenter SAN Manager是EMC ControlCenter产品家族中用于管理SAN的组件。 SAN Manager默认监听于TCP 10444端口的Master Agent服务（msragent.exe）在处理SSTCTGTRANS请求时将报文数据拷贝到了固定大小的栈缓冲区，远程攻击者可以通过发送恶意报文触发溢出，导致以系统用户权限执行任意指令。 EMC ControlCenter 6.0 EMC ControlCenter 5.2 SP5 EMC ---...

EMC Control Center SST_CTGTRANS Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Control Center. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Master Agent service msragent.exe which listens by default on TCP port...

EMC Control Center SST_SENDFILE Remote File Retrieval Vulnerability

This vulnerability allows remote attackers to retrieve arbitrary files on systems with vulnerable installations of EMC Control Center. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Master Agent service msragent.exe which listens by default on TCP po...

CVE-2008-5034

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

CVE-2008-5034: Improper Link Resolution Before File Access

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

Unfixed XSS vulnerability at www.masterlube.com

Security researcher BackDoor, has submitted on 21/10/2008 a cross-site-scripting XSS vulnerability affecting www.masterlube.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currentl...

phpautos-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Auto's V2.9.1 searchresults.php catid http://www.phpautos.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHP Calendar Script Remote XSS (Permanent) Vulnerabilities

============================================================== PHP Calendar Script Remote XSS Permanent Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

phpcal-xss.txt

============================================================== PHP Calendar Script Remote XSS Permanent Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2008-4118

Cross-site scripting XSS vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4118

CVE-2008-4118 is a cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling potential script execution in a user’s browser. Affected product is Sound Master 2nd from High ...

CVE-2008-4118: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...