KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products...

mpsw-rfi.txt

magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...

KLA10143 ACE vulnerability in EF Commander

A buffer overflow was found in EF Commander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO or user assistance. Original advisories - Related products EF-Commander CVE list CVE-2007-0180 high...

trivial proof of concept code for F-Prot 4.6.6 .ACE DoS

No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...

F-PROT Antivirus ACE/CHM远程拒绝服务及溢出漏洞

F-PROT Antivirus是一款反病毒应用程序。 F-PROT Antivirus解析ACE/CHM档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，绕过检测。 当解析特殊构建的ACE档时会造成无限循环而产生拒绝服务攻击。 当解析特殊构建的CHM档时可造成堆溢出。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 升级到最新程序F-Prot 4.6.7: http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof o...

F-Prot antivirus buffer overflow

Buffer overflow on parsing CHM and ACE files...

fprot-dos.txt

Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix platforms could allow a remote attacker to cause...

F-PROT Antivirus畸形ACE文件处理拒绝服务漏洞

F-Prot Antivirus是一款UNIX平台上的杀毒软件。 F-Prot Antivirus在处理特制的ACE压缩文件时会陷入死循环，远程攻击者可能利用此漏洞使F-Prot失去工作能力。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof of concept code for F-Prot 4.6.6...

F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit

No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...

F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit

Exploit for linux platform in category dos / poc ====================================================== F-Prot Antivirus 4.6.6 ACE Denial of Service Exploit ====================================================== fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006...

F-Prot AntiVirus 4.6.6 - ACE Denial of Service

F-Prot AntiVirus 4.6.6 - ACE Denial of Service fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright...

F-Prot AntiVirus 4.6.6 - 'ACE' Denial of Service

fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in al...

CVE-2006-6158

Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...

CVE-2006-6158

Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...

CVE-2006-6158

CVE-2006-6158 affects PMOS Help Desk 2.4 (aka InverseFlow Help Desk 2.31, sold as Ace Helpdesk 2.31). The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via: (1) the id or email parameter to ticketview.php, or (2) the email...

PMOS Help Desk 2.3 - ticket.php?email Cross-Site Scripting

PMOS Help Desk 2.3 - ticket.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

PMOS Help Desk 2.3 - ticketview.php Multiple Cross-Site Scripting Vulnerabilities

PMOS Help Desk 2.3 - ticketview.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in th...

PMOS Help Desk 2.3 - 'ticket.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may he...

Jinzora <= 2.1 (media.php) Remote File Include Vulnerability

No description provided by source. Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath...

phpMyConferences <= 8.0.2 (menu.inc.php) File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpMyConferences = 8.0.2 menu.inc.php File Include Vulnerability =================================================================== phpMyConferences = 8.0.2 Remote File...