AOL Instant Messenger AIM "Away" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

XMAP3 Denial of Service (DoS) Vulneability

Overview XMAP3's print function has a vulnerability that could cause a temporary denial of service DoS condition when receiving unexpected data. Impact An attacker could cause a denial of service DoS condition by sending unexpected data to XMAP3's print service. Solution Please refer to the 'Vend...

Critical: Red Hat Security Advisory: samba security update

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of...

EUR Print Manager Denial of Service Vulnerability

Overview EUR Print Manager fails to accept job execution requests when it receives unexpected data, which could be exploited to cause a Denial of Service DoS condition. Impact An attacker could cause a Denial of Service DoD. Solution Please refer to the 'Vendor Information' section for official...

CVE-2008-2281

Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluat...

Microsoft IE“打印链接列表”跨区脚本注入漏洞

BUGTRAQ ID: 29217 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理HTML页面打印时存在漏洞，远程攻击者可能利用此漏洞通过诱骗用户打印恶意页面控制用户系统。 当用户打印页面时，Internet Explorer使用本地资源脚本生成所要打印的新HTML，该HTML包含以下元素：首部、网页主体、页脚，如果允许的话还有网页中链接列表。尽管脚本只使用链接内部数据中的文本，但没有验证链接的URL就直接添加到了HTML，这允许注入任意脚本，并在生成新的HTML时执行。 Microsoft Internet Explorer 8.0b Microso...

Aviv Raff of IE0day, published-vulnerability warning-the black bar safety net

MS Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Specific details: If you enable the "Print Table of Links", in printing a web page, it is possible to cause the execution of arbitrary code, and of course VISTA UAC may block it : Reproduce: 1. Below this place on the...

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting !-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in its “Print Table of...

CVE-2008-2144

Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors...

CVE-2008-2144

CVE-2008-2144 affects Sun Solaris print service on Solaris 8/9/10. The underlying issues are multiple unspecified vulnerabilities in the print service that allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors. Connected patch data shows specific remedi...

CVE-2008-2144

Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors...

CVE-2008-2124

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

CVE-2008-2124

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

fipscms-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Blind SQL...

fipsCMS (print.asp lg) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= fipsCMS print.asp lg Remote SQL Injection Vulnerability =========================================================...

FipsCMS 2.1 - print.asp SQL Injection

FipsCMS 2.1 - print.asp SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

fipsCMS (print.asp lg) Remote SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

FipsCMS 2.1 - 'print.asp' SQL Injection

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Blind SQL...

pbcs-multi.txt

Project Based Calendaring System PBCS Version 0.7.1 Multiple Vulnerabilities Script: http://www.pbcs.org/pbcsdownload.php Poc : Hi str0ke Thanx To Posted but I Want Add Some Vulns In This Script 1- remote file upload http://localhost/pbcs-0.7.1-1/src/yopyupload.php after upload you can get you fi...

GLSA-200804-23 : CUPS: Integer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200804-23 CUPS: Integer overflow vulnerability Thomas Pollet reported a possible integer overflow vulnerability in the PNG image handling in the file filter/image-png.c. Impact : A malicious user might be able to execute arbitrary...