Lucene search
+L

2000 matches found

exploitpack
exploitpack
added 2008/11/25 12:0 a.m.25 views

Google Chrome - MetaCharacter URI Obfuscation

Google Chrome - MetaCharacter URI Obfuscation Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more...

0.2AI score
SaveExploits0
zdt
zdt
added 2008/11/25 12:0 a.m.13 views

Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability

Exploit for unknown platform in category dos / poc ================================================================= Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability ================================================================= Google Chrome MetaCharacter URI Obfuscation...

7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/25 12:0 a.m.20 views

Google Chrome - MetaCharacter URI Obfuscation

Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage. Check...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/10/17 12:0 a.m.15 views

Email Address Obfuscated Within HTML Comments

Binary data 4710.prm...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.11 views

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.10 views

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References7
Packet Storm
Packet Storm
added 2007/11/27 12:0 a.m.30 views

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2007/10/18 12:0 a.m.40 views

Microsoft ActiveSync弱口令混淆信息泄露漏洞

BUGTRAQ ID: 25976 CVECAN ID: CVE-2007-5460 Microsoft ActiveSync是用于同步计算机与PDA的应用程序。 ActiveSync设备建立连接口令交换的过程实现上存在漏洞,攻击者可能利用此漏洞获取口令信息。 插入到USB口时设备会使用类似于标准网络接口的连接,获得IP地址后设备会通过RAPI在990/TCP端口初始化与主机的通讯,这个过程也会经历一个小型的握手例程,如果合适的话,会对主机挑战设备PIN或口令。用户提供了主机的PIN/口令后,会通过XOR与E9固定密钥进行混淆,然后通过USB网络连接发送给设备进行验证。...

7.1CVSS6.5AI score0.02219EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2007/10/15 12:0 a.m.7 views

PT-2007-6496 · Microsoft · Activesync

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveSync version 4.1 Description: The issue concerns the use of weak encryption, specifically XOR obfuscation with a fixed key, when sending the user's PIN/Password over the USB connection from the host to the device. This might...

7.1CVSS4.4AI score0.02219EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2007/02/19 7:41 p.m.10 views

Mysql log file obfuscation

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysqlrealquery function. NOTE: this issue was originally reported for the mysqlquery function, but the vendor states that since mysqlquer...

4.6CVSS7.4AI score0.01347EPSS
SaveExploits1References4
seebug.org
seebug.org
added 2006/10/23 12:0 a.m.30 views

linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes

No description provided by source. / execve shellcode with 'fuck up disasm' ability, 32 bytes long by BaCkSpAcE sinisa86atgmaildotcom BitByterz Labs 2006 http://www.bitbyterz.org ; ; shellcode.asm ; fupdisasm: db 0x68 ; opcode for PUSH DW instruction db 0xcd ; crypt+1, opcode for INT instruction ...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/07/24 12:19 p.m.21 views

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

2.1CVSS6.1AI score0.00398EPSS
SaveExploits0References3
CVE
CVE
added 2006/07/21 9:0 p.m.51 views

CVE-2006-3785

CVE-2006-3785 Affected software: Symantec pcAnywhere 12.5. Vulnerability: Passwords in the GUI are obfuscated but not encrypted in the associated .cif (CallerID) file. This allows local users to extract passwords from the CIF/file using tools such as Nirsoft Asterwin. Impact: Local access is requ...

2.1CVSS6.2AI score0.00398EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2006/07/21 9:0 p.m.32 views

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

6.1AI score0.00398EPSS
SaveExploits0References3
Cent OS
Cent OS
added 2006/06/09 5:37 p.m.88 views

mysql security update

CentOS Errata and Security Advisory CESA-2006:0544 Updated mysql packages that fix multiple security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...

7.5CVSS7AI score0.35777EPSS
SaveExploits5References8
RedHat Linux
RedHat Linux
added 2006/06/09 3:0 p.m.56 views

Important: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix multiple security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a serve...

7.5CVSS7AI score0.35777EPSS
SaveExploits5References7
zdt
zdt
added 2006/05/14 12:0 a.m.20 views

linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 execve Diassembly Obfuscation Shellcode 32 bytes ============================================================ / execve shellcode with 'fuck up disasm' ability, 32 bytes long...

7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/05/14 12:0 a.m.44 views

linux/x86 - execve Diassembly Obfuscation Shellcode 32 bytes

linux/x86 execve Diassembly Obfuscation Shellcode 32 bytes. Shellcode exploit for linx86 platform / execve shellcode with 'fuck up disasm' ability, 32 bytes long by BaCkSpAcE sinisa86atgmaildotcom BitByterz Labs 2006 http://www.bitbyterz.org ; ; shellcode.asm ; fupdisasm: db 0x68 ; opcode for PUS...

0.1AI score
SaveExploits0
securityvulns
securityvulns
added 2006/04/14 12:0 a.m.91 views

RevoBoard [email] tag XSS

Revoboard php is based on an earlier version of PunBB. I know for sure that this affects v1.8. The email tag parser obsfucates emails to stop harvesters. To execute code, do this: php $code = ''" onMouseover="javascript:alert/xss/"'; for$a=0;$astrlen$code;$a++ $c = ordsubstr$code,$a,1; $c +=...

1.5AI score
SaveExploits0
Cvelist
Cvelist
added 2005/12/04 10:0 p.m.23 views

CVE-2004-2649

Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters e.g. spaces coded as "&32" in the middle of the URL...

6.6AI score0.02525EPSS
SaveExploits2References7
Rows per page
Query Builder