2314 matches found
Power Daemon <= 2.0.2 (WHATIDO) Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================================ Power Daemon include include include include include include include include include include /== Prototypes ==/ void fatalchar ; void Usagechar ; void FakeServerchar ,int; void...
eyeOS <= 0.8.9 Remote Code Execution
GulfTech Security Research February 7, 2006 Vendor : eyeOS Project URL : http://www.eyeos.org/ Version : eyeOS = 0.8.9 Risk : Remote Code Execution Description: eyeOS is a "web based operating system" written in php, that lets you access your data and your applications from anywhere with an...
eyeOS089.txt
GulfTech Security Research February 7, 2006 Vendor : eyeOS Project URL : http://www.eyeos.org/ Version : eyeOS = 0.8.9 Risk : Remote Code Execution Description: eyeOS is a "web based operating system" written in php, that lets you access your data and your applications from anywhere with an...
[Full-disclosure] Re: cPanel Multiple Cross Site Scripting Vulnerability
One more to ur list http://localhost:2095/dowebmailforward.cgi?fwd=3Cscript3Ealert28document.cookie293B3C2Fscript3E&action=Add+Forwarder Sumit On 2/4/06, Hamish Stanaway [email protected] wrote: Hi there, Thank you for finding this vulnerability in a widely used software. I was wondering i...
[SA18718] MPlayer ASF File Parsing Integer Overflow Vulnerabilities
TITLE: MPlayer ASF File Parsing Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA18718 VERIFY ADVISORY: http://secunia.com/advisories/18718/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: MPlayer 1.x http://secunia.com/product/2255/ DESCRIPTION: AFI...
neomailXSS.txt
Title: Neomail Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 24 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Perl Client Vendor: neomail / www.neocodesolutions.com Vulnerability: Cross Site Scripting / Cookie-The...
[Full-disclosure] cPanel Multiple Cross Site Scripting Vulnerability
Title: cPanel Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 22 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Web Hosting Manager Vendor: cPanel Vulnerability: Cross Site Scripting / Cookie-Theft /...
[Full-disclosure] Outblaze Cross Site Scripting Vulnerability
Title: outblaze Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 23 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail manager Vendor: outblaze / www.outblaze.com Vulnerability: Cross Site Scripting /...
icq-xss.txt
Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...
Tftpd32 2.81 (GET Request) Format String Denial of Service PoC
Exploit for unknown platform in category dos / poc ============================================================== Tftpd32 2.81 GET Request Format String Denial of Service PoC ============================================================== !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical...
TFTPD32 2.81 - GET Format String Denial of Service (PoC)
!/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz = "\x00\x01" ; GET $bzz .= "%.1000x\x00"; $bzz .=...
Cerberus FTP Server 2.32 - Denial of Service
Cerberus FTP Server 2.32 - Denial of Service / Cerberus FTP Server 2.32 Denial of Service original advisory: http://kapda.ir/advisory-210.html cerberus232dosremotexpl.c / include include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip,...
[VulnWatch] Fortinet Advisory: Apple QuickTime Player Color Map Entry Size Buffer Overflow
Fortinet Security Advisory: FSA-2006-06 Apple QuickTime Player Color Map Entry Size Buffer Overflow Advisory Date : January 12, 2006 Reported Date : November 28, 2005 Vendor : Apple computers Affected Products : Apple QuickTime Player v7.0.3 Severity : High Reference :...
[VulnWatch] Fortinet Advisory: "Apple QuickTime Player ImageWidth Integer Overflow Vulnerability"
Fortinet Security Advisory: FSA-2006-05 Apple QuickTime Player ImageWidth Integer Overflow Vulnerability Advisory Date : January 12, 2006 Reported Date : November 28, 2005 Vendor : Apple computers Affected Products : Apple QuickTime Player v7.0.3 Severity : High Reference :...
Break SSS technology blockade-vulnerability warning-the black bar safety net
Recently is really too busy, while the countersunk finishing school to be turned over tothe networkthe security research topic, while in the online to clean up the malicious website. I love machine follow me were non-stop, no how much rest of time okay my machine is a dual Xeon in theservice, ha...
phpMyChat0146.txt
phpMyChat Multiple XSS vulnerabilities. I. BACKGROUND phpMyChat is an easy-to-install, easy-to-use multi-room chat based on PHP and a database, supporting MySQL, PostgreSQL, and ODBC. II. DESCRIPTION phpMyChat 0.14.6 startpage.css.php, style.css.php, userspopupL.php are prone to Cross-site...
vTiger CRM 4.2 - SQL Injection
vTiger CRM 4.2 - SQL Injection source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HTML...
[Full-disclosure] ExoPHPDesk is helpdesk written in PHP/SQL.
=========================================================== ============================================================ Title: ExoPHPDesk Multiple Remote Vulnerabilities Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 15/11/2005 Severity: High. Remote Users...
[Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution
ZDI-05-002: Clam Antivirus Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-05-002.html November 4th, 2005 -- CVE ID: CAN-2005-3303 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87 -- TippingPointTM IPS Customer Protectio...
RBExplorer 1.0 (Hijacking Command) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================ RBExplorer 1.0 Hijacking Command Denial of Service Exploit ============================================================ !usr/bin/perl RBExplorer Hijack Command Exploit...