PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ============================================================ PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit ============================================================ Exploited by TheLeader, Debug SP. Thanks: HDM...

Memory corruption

The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service memory corruption...

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

Design/Logic Flaw

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

Firefox download filename spoofing with RTL override

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

Moderate: Red Hat Security Advisory: pango security update

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

Plug horse code is space-separated solutions-vulnerability warning-the black bar safety net

Some time ago, the new cloud management system, dynamic network Forum get a WEBSHELL and this, today, we discuss this aspect of things, in fact, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case?...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6562)

This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues : - Mozilla developers and community members...

In ASP the database insert webshell small conference-vulnerability warning-the black bar safety net

Some time ago, the new cloud management system, dynamic network Forum get a WEBSHELL and this, today, we discuss this aspect of things, in fact, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case?...

Debian DSA-1830-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0040 The execution of arbitrary code might be possible via a crafted...

Debian DSA-1885-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3070 Jesse Ruderman discovered crashes in the layout...

M.J.M. Quick Player v1.2 Unicode Stack overflow exploit

Exploit for unknown platform in category local exploits ======================================================= M.J.M. Quick Player v1.2 Unicode Stack overflow exploit ======================================================= !/usr/bin/python M.J.M. Quick Player v1.2 Unicode Stack overflow exploit ...

MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner

This module is based on et's HTTP Directory Scanner module, with one exception. Where authentication is required, it attempts to bypass authentication using the WebDAV IIS6 Unicode vulnerability discovered by Kingcope. The vulnerability appears to be exploitable where WebDAV is enabled on the IIS...

RadASM 2.2.1.5 .mnu Local Unicode Overflow

============================================================================= » RadASM 2.2.1.5 .mnu File Local Unicode Overflow Poc SEH » By : SkuLL-HacKeR » Email : [email protected] & [email protected] » Note : Hacker R0x Lamerz S3 x...

Quick Player 1.2 Unicode Buffer Overflow

!/usr/bin/python Quick Player v1.2 Unicode Buffer Overflow Founded by: mrme great job by mrme! http://www.exploit-db.com/exploits/10797 Coded by : sinn3r x90.sinneratgmaild0tc0m thanks : corelanc0d3r's unicode article - awesome job! Tested on : Windows XP SP3 ENG Oops! Here goes one of my n00b...

Quick Player 1.2 - Unicode Buffer Overflow (2)

Quick Player 1.2 - Unicode Buffer Overflow 2 !/usr/bin/python Quick Player v1.2 Unicode Buffer Overflow Found by : mrme great job by mrme! http://www.exploit-db.com/exploits/10797 Coded by : sinn3r x90.sinneratgmaild0tc0m thanks : corelanc0d3r's unicode article - awesome job! Tested on : Windows ...

Quick Player 1.2 - Unicode Buffer Overflow (2)

!/usr/bin/python Quick Player v1.2 Unicode Buffer Overflow Found by : mrme great job by mrme! http://www.exploit-db.com/exploits/10797 Coded by : sinn3r x90.sinneratgmaild0tc0m thanks : corelanc0d3r's unicode article - awesome job! Tested on : Windows XP SP3 ENG Oops! Here goes one of my n00b...