10116 matches found
WordPress <= 1.3.1 - Remote Code Execution
Because of this vulnerability, the authenticated users with manageoptions and uploadfiles capabilities can execute arbitrary code by uploading a PHP script. Solution Update WordPress...
CVE-2008-5397
Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...
BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC
No description provided by source. Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs durin...
Fwd: Deny Of Service and infinite loop in BitDefender (module pdf.xmd)
Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs during parsing of included compressed...
BitDefender (module pdf.xmd) Infinite Loop Denial of Service PoC
Exploit for unknown platform in category dos / poc ================================================================ BitDefender module pdf.xmd Infinite Loop Denial of Service PoC ================================================================ Deny Of Service and infinite loop in BitDefender modu...
CVE-2008-5160: Undefined Security Weakness
Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service daemon crash via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."...
[SECURITY] Fedora 9 Update: cairo-dock-1.6.3.1-1.fc9.1
An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...
CVE-2008-4816
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...
Security feature bypass
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...
CVE-2008-4816
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...
CVE-2008-4816
CVE-2008-4816 concerns the Download Manager in Adobe Reader 8.1.2 and earlier on Windows. The vulnerability is described as unspecified, enabling remote attackers to change Internet Security options on a client machine via unknown vectors. The connected documents confirm the affected product/vers...
CVE-2008-4816: Undefined Security Weakness
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...
CVE-2008-4865
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE i...
WP Comment Remix 1.4.3 Remote SQL Injection Exploit
No description provided by source. ?php / WP Comment Remix 1.4.3 SQL Injection Proof of Concept By g30rg3x g30rg3xatchxsecuritydotorg Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a...
WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection
WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / //...
WP Comment Remix 1.4.3 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== WP Comment Remix 1.4.3 Remote SQL Injection Exploit =================================================== \n"; print "\n : Hostname or IP Address"; print "\n : Path to WordPress Defaults to...
wpcomment-sql.txt
Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / // Script Header function head print "\n WP Comment Remix...
WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection
Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / // Script Header function head print "\n WP Comment Remix...
Globsy 1.0 - Remote File Rewriting
!/usr/bin/php -q '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrite or create any file / errorreporting0; iniset"defaultsockettimeout",5; $host =...
Linux kernel dccp_setsockopt_change() integer overflow
Integer overflow in the dccpsetsockoptchange function in net/dccp/proto.c in the Datagram Congestion Control Protocol DCCP subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service panic via a crafted integer value, related to Change L and Chan...