Hot Links Lite 1.0 Cross Site Scripting

New eVuln Advisory: url XSS in Hot Links Lite http://evuln.com/vulns/142/summary.html -----------Summary----------- eVuln ID: EV0142 Software: Hot Links Lite Vendor: Mrcgiguy Version: 1.0 Critical Level: low Type: Cross Site Scripting Status: Unpatched. No reply from developers PoC: Available...

Hot Links Lite 1.0 Cross Site Scripting

New eVuln Advisory: sitename XSS in Hot Links Lite Summary: http://evuln.com/vulns/143/summary.html Details: http://evuln.com/vulns/143/description.html -----------Summary----------- eVuln ID: EV0143 Software: Hot Links Lite Vendor: Mrcgiguy Version: 1.0 Critical Level: low Type: Cross Site...

Tomcat remote denial of service vulnerability analysis(CVE-2 0 1 0-2 2 2 7)-vulnerability warning-the black bar safety net

The present article is an analysis of the POC process, the pressure of the N months, and now before the issue. Using the analysis of POC, Tomcat in addition to the latest versionsee the specific website, and JBOSS in addition to the latest version, can fight, POC see the article. JBOSS official h...

jSchool Advanced Blind SQL Injection

----------------------------------------------------------------------- jSchool Advanced Blind SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Don Tukulesto [email protected] Site : http://indonesiancoder.com Vendor :...

jSchool Advanced - Blind SQL Injection

----------------------------------------------------------------------- jSchool Advanced Blind SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Don Tukulesto [email protected] Site : http://indonesiancoder.com Vendor :...

JCMS 2010任意文件下载漏洞

大汉版通JCMS 2010内容管理系统是基于J2EE构架设计，以全新理念构建的内容管理系统。系统提供了从内容采集、 创建、管理、传递、发布、共享呈送等信息全生命周期过程中所需的各项功能。 在/module/download/downfile.jsp文件中,没有对pathfile和filename参数进行判断，导致可以下载任意 WEB目录下的文件。 JCMS 2010 SEBUG临时解决办法 对pathfile和filename参数进行合理判断。 ———— http://www.hanweb.com/...

jSchool Advanced - Blind SQL Injection

jSchool Advanced - Blind SQL Injection ----------------------------------------------------------------------- jSchool Advanced Blind SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Don Tukulesto [email protected] Site :...

AuraCMS 1.62 - 'pfd.php' SQL Injection

----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage : http://indonesiancoder.com Vendor :...

AxsLinks 0.3 Cross Site Scripting

New eVuln Advisory: URL and Title XSS in AxsLinks http://evuln.com/vulns/139/summary.html -----------Summary----------- eVuln ID: EV0139 Software: AxsLinks Vendor: AXScripts Version: 0.3 Critical Level: medium Type: Cross Site Scripting Status: Unpatched. No reply from developers PoC: Not availab...

Native Instruments Kontakt 4 Player - .NKI File Syntactic Analysis Buffer Overflow (PoC)

Native Instruments Kontakt 4 Player - .NKI File Syntactic Analysis Buffer Overflow PoC / Title: Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 4.1.3.4125...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft...

Hot Links SQL 3.2.0 Administrative Bypass

New eVuln Advisory: Cookie Auth Bypass in Hot Links SQL http://evuln.com/vulns/140/summary.html ----------------------- Summary ------------------------- eVuln ID: EV0140 Software: Hot Links SQL 3 Vendor: Mrcgiguy Version: 3.2.0 Critical Level: high Type: Authentication Bypass Status: Unpatched. ...

XSS in CLANSPHERE

Vulnerability ID: HTB22693 Reference: http://www.htbridge.ch/advisory/xssinclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk...

Foxit Reader 4.1.1 - Stack Overflow

Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite. The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler. This vulnerability was reported to the...

Foxit Reader 4.1.1 - Stack Overflow

Foxit Reader 4.1.1 - Stack Overflow Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite. The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler. This...

Joomla ProDesk 1.5 Local File Inclusion

----------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.5 comprodesk&includefile Local File Inclusion http://joomlashowroom.com Price - $ 49.99 ---------------------------------------------------------------------------------------- B...

Joomla Dcnews Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Joomla Component comdcnews LFI Vulnerability Date: 6-11-2010 Author: Th3 RDX Software Link: n/a Version: n/a Tested on: online Sites category: webapp/Joomla Code : n/a...

Avidemux 2.5.4 Buffer Overflow

!/usr/bin/env ruby avidemuxcrash.rb Title : Avidemux Start Avidemux -- Load/Run Project -- crash!! Note: You can also use another video file format you would have to change the Format in Line and maybe some other stuff 54 too file = ARGV0 if file.nil? puts "Usage: ruby FILE " exit end name =...

CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

Avidemux <= 2.5.4 Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc =============================================== Avidemux Start Avidemux -- Load/Run Project -- crash!! Note: You can also use another video file format you would have to change the Format in Line and maybe some other stuff 54 too file = ARGV0 if...