Remote code execution

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability."...

fipsCMS Light 2.1 Database Disclosure

!/usr/bin/perl fipsCMS Light 2.1 Arbitrary Database Disclosure Exploit Exploit by d3b4g script:http://fipsasp.com Demo: http://demo.fipsasp.com/fipsCMSlight/fipsdb/db.mdb From Tiny little island of maldivies use LWP::Simple; use LWP::UserAgent; print "\fipsCMS Light 2.1 Arbitrary Database...

[SECURITY] Fedora 11 Update: mingw32-opensc-0.11.8-1.fc11

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

Design/Logic Flaw

Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability."...

CVE-2007-6216

Race condition in the Fibre Channel protocol fcp driver and Devices filesystem devfs in Sun Solaris 10 allows local users to cause a denial of service system hang via some programs that access hardware resources, as demonstrated by the 1 cfgadm and 2 format programs...

Hacking tricks of talking about network intrusion to improve the method-vulnerability warning-the black bar safety net

Now you want to invade a site directly with the data server, open some ports, with those overflowing way to engage in the web server Station, presumably unlikely, if now also can use 1 4 3 3 can easily handle a server, then you will be able to buy lottery tickets went to the Oh. Now the...

Regression in IE: Accessing remote/local content in IE (GM#009-IE)

For further information on the regression itself see "Solution" section. GreyMagic Security Advisory GM009-IE ===================================== By GreyMagic Software, 23 Aug 2002, 12 Oct 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm009-ie/. Topic: Accessing...

Accessing cookies via ftp

Topic: accessing cookies via ftp Affected Software: all versions of Netscape/Mozilla Author: 3APA3A Risk: Low Remotely Exploitable: Yes Impact: depending on server configuration cookie set by server can be retrieved by hostile side from client Vendor URL: http://www.mozilla.org SECURITY.NNOV...

ie5.cross-frame.txt

Georgi Guninski security advisory 4, 2000 IE 5 security vulnerablity - circumventing Cross-frame security policy and accessing the DOM of "old" documents. Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies,...

Apple At Ease 5.0 - Information Disclosure

Apple At Ease 5.0 - Information Disclosure source: https://www.securityfocus.com/bid/531/info At Ease 5.0 will allow a user to access any user's volume on the server through a web browser. The tested configuration is as follows: MacOS 7.6.1 should work with anything greater than 7 At Ease 5.0.2...