1204 matches found
Sun JRE / JDK multiple security vulnerabilities
Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...
Multiple personal firewalls uncommon process identifier protection bypass
Two lower bits of process identifier are not ignored in hooked OpenProcess functions, making it possible to access protected application by using process id no divisible by 4...
Deutsche Telekom Speedport w700v protection bypass
Bruteforce protection is implemented as client-side script...
PHP-Nuke SQL注入保护绕过和多个SQL注入漏洞
PHP-Nuke是一款基于PHP的WEB应用程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是对于"/"字符缺少充分的过滤，使用"%2f"可绕过输入检查，进行SQL注入攻击。 PHP-Nuke 8.0 .3.3b 目前没有解决方案提供： http://www.phpnuke.org http://www.example.com/nuke/?%2f http://www.example.com/html80/?%2f/UNION%2f/SELECT...
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass / Multiple SQL Injections
source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...
SecuStick USB flash drive protection bypass
File access does not dependant on authentication, making it's possible to bypass authentication for file access...
Microsoft Windows Vista protected process protection bypass
It's possible to set or remove process protection...
CVE-2007-1762
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / slash characters in the URL...
PHP read_file safe_mode protection bypass
It's possible to bypass protection by using php://../../ prefix to filename...
Linux netfilter multiple security vulnerabilities
Protection bypass with fragmented IPv6 packets, denial of service...
PHP filtering extension multiple security vulnerabilities
Buffer underflow, filtering protection bypass...
Plash sandbox protection bypass
It's possible to execute any command via /dev/tty device...
CVE-2007-1395
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...
CVE-2007-1221
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...
Multiple PHP security vulnerabilities
Crossite scripting, DoS, protection bypass, buffer overflows...
Comodo Firewall protection bypass
Application uses named pipe with changing, but predictable name which allows to manipulate protection settings...
Novell ZenWorks Desktop Management protection bypass
It's possible to upload images into arbitrary directories...
PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC
Exploit for multiple platform in category dos / poc ========================================================== PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC ========================================================== ?php...