PR07-20: Webroot disclosure on Webbler CMS

PR07-20: Webroot disclosure on Webbler CMS This advisory has been published following consultation with UK CPNI formerly known as NISCC Date Found: 14th June 2007 Successfully tested on: Webbler CMS version 3.1.3. Earlier versions are possibly affected as well. Note: the version number is usually...

Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow

Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino & prdelka Exploitation steps: 1 The instruction "call dword ecx" is performed with user supplied ECX 2 EAX reference our buffer from retaddr onward 3 we put pointer in ECX to a...

CVE-2007-3781

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...

Classic: Web2. 0 client components vulnerability scanning one-vulnerability warning-the black bar safety net

A, Web2. 0 is the several technology of integrated application of the results, these techniques are: AJAX（Asynchronous JavaScript and XML,Flash, JSONJavaScript Object Notation,SOAP Simple Object Access Protocol and REST, Representational State Transfer, etc. These techniques coupled with...

Heap overflow

Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers 1 a stack-based buffer overflow during extraction, or 2 a heap-based buffer...

Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

CVE-2007-2535

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

Code injection

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-2536

PicoZip allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-2536

PicoZip allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1673

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1673

Removed by vendor...

CVE-2007-1669

zoo decoder 2.10 zoo-2.10, as used in multiple products including 1 Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, 2 Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and 3 AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service infinit...

Multiple vendors ZOO file decompression Infinite Loop DoS PoC

Exploit for multiple platform in category dos / poc ============================================================= Multiple vendors ZOO file decompression Infinite Loop DoS PoC ============================================================= / Exploit for the vulnerability: Multiple vendors ZOO file...

Sql injection

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

CVE-2006-7180

ieee80211output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information related to network structure, and possibly cause a denial of service disrupted authentication and conduct spoofing attacks...

Build not dead asp-Trojan-vulnerability warning-the black bar safety net

Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...

Buffer-overflow in Conquest client 8.2a (svn 691)

Luigi Auriemma Application: Conquest http://www.radscan.com/conquest.html Versions: = 8.2a svn 691 Platforms: nix and Windows Bugs: A buffer-overflow in metaGetServerList B memory corruption through SPCLIENTSTAT Exploitation: local and remote, versus the client Date: 07 Mar 2007 Author: Luigi...

CVE-2007-1094

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service NULL dereference and application crash via JavaScript onUnload handlers that modify the structure of a document...