8464 matches found
Vulnerabilities in AI-Bolit
Hello 3APA3A! These are Brute Force and Information Leakage vulnerabilities in AI-Bolit. This is security web application. ------------------------- Affected products: ------------------------- Vulnerable are all versions of AI-Bolit. In version 20121014 the filename format was changed with addin...
[DNSwalk] Running on BackTrack 5 R3
Dnswalk is a DNS debugger. It performs zone transfers of specifieddomains, and checks the database in numerous ways for internalconsistency, as well as accuracy. dnswalk is not for the faint of heart. It should NOT be used without a firm knowledge of the DNS RFC's. The warnings and errors must be...
Heap spraying Adobe Illustrator
Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...
DEBIAN-CVE-2011-3342
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via vectors related to 1 NAME, 2 PLYR, 3 CHTS, or 4 AIPL aka AI config chunk loading from a savegame...
Les video AI Xin technology source cookie injection vulnerability-vulnerability warning-the black bar safety net
by Mr. DzY from www.0855.tv 源码 下载 :http://www.mycodes.net/25/4585.htm Default background:admin/login. asp Injection point:http://www. xxxx. com/shownews. asp? id=2 1 6 exp: javascript:alertdocument. cookie=”id=”+escape“2 1 6 and 1=2 union select 1,username,password,4,5,6,7,8,9,1 0 from admin”;...
DDOS attack on Change.org from China !
DDOS attack on Change.org from China ! Change.org, an online petitioning platform, has come under an ongoing distributed denial of service DDoS attack originating from China after the site hosted a call urging Chinese authorities to release artist Ai Weiwei from custody. The attacks, which starte...
WM Downloader v3.0.0.9 (.pls) Exploit (WinXP SP3)
Exploit for unknown platform in category local exploits ================================================== WM Downloader v3.0.0.9 PLS PLA Exploit WinXP SP3 ================================================== !/usr/bin/python . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\...
CVE-2009-0367
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...
CVE-2009-0367
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...
Code injection
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...
CVE-2009-0367
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...
CVE-2009-0367
The CVE-2009-0367 vulnerability affects Wesnoth’s Python AI module (Wesnoth 1.4.x and 1.5 before 1.5.11). A remote attacker can escape the sandbox and run arbitrary Python code by using a whitelisted module that imports an unsafe module, then accessing it via a hierarchical module name through th...
[Backports-security-announce] Security Update for wesnoth
Gerfried Fuchs uploaded new packages for wesnoth which fixed the following security problems: CVE-2009-0367 The implementation of the sandbox for the python AIs was possible to circumvent, allowing it to execute arbitrary python code on the clients machine. Please note that the official servers...
CVE-2008-3961
Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file...
CVE-2008-3961
The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...
CVE-2008-3961
Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file...
Unfixed XSS vulnerability at ai-depot.com
Security researcher Mystick, has submitted on 05/12/2008 a cross-site-scripting XSS vulnerability affecting ai-depot.com, which at the time of submission ranked 329147 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/01/2009. It is currently...
CVE-2008-1397
Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...
CVE-2008-1397
Affected product/versions: Check Point VPN-1 Power/UTM, NGX R60–R65 and NG AI R55. Vulnerability: remote authenticated users can cause a site-to-site VPN tunnel outage and possibly intercept traffic by configuring the local RFC1918 IP address to match an endpoint RFC1918 address, then using SecuR...
