Kwik Pay Payroll 4.10.3 - '.zip' Denial of Service

Exploit Title: Kwik Pay Payroll .zip DoS Date: April 1, 2010 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com File - Restore Database - Find Locate zip file Click the restore button at the bottom Program Crash, and becomes unresponsive Happy April...

Zabbix 1.8.1 - SQL Injection

Zabbix 1.8.1 - SQL Injection ============================================= - Release date: April 1st, 2010 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- Zabbix = 1.8.1 SQL Injection II. BACKGROUND...

Solaris 10 (sparc) : 139967-02

SunOS 5.10: usr/sbin/rpc.metad patch. Date this patch was last updated by Sun : Apr/28/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1357

creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32940...

Online Photo Pro 2.0 XSS

========================================================================================= Title : Cross-site Scripting XSS Vulnerability Software : Online Photo Pro v2.0 Vendor : www.esoftpro.com Date : 19 April 2009 Author : Vrs-hCk Contact : [email protected] Blog : c0li.BlogSpot.Com...

Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes

No description provided by source. Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Name Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Systems Affected APEX 3.0 optional component of 11.1.0.7 installation...

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Name Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Systems Affected APEX 3.0 optional...

Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes

Exploit for multiple platform in category local exploits ================================================================== Oracle APEX 3.2 Unprivileged DB users can see APEX password hashes ================================================================== Unprivileged DB users can see APEX...

CVE-2009-1351

creationtimestamp| type| source ---|---|--- 2009-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8451...

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes

Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Name Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Systems Affected APEX 3.0 optional component of 11.1.0.7 installation Severity High Risk Category Password...

Integer overflow

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented o...

Joomla MailTo SQL Injection

Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit /index.php?option=commailto&tmpl=mailto&article=SQL&Itemid=1 Example...

Joomla! Component MailTo - article SQL Injection

Joomla! Component MailTo - article SQL Injection Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...

Joomla! Component MailTo - 'article' SQL Injection

Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit...

CVE-2009-0556

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...

XBMC 8.10 (takescreenshot) Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ========================================================= XBMC 8.10 takescreenshot Remote Buffer Overflow Exploit ========================================================= !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer...

XBMC 8.10 (get tag from file name) Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================= XBMC 8.10 get tag from file name Remote Buffer Overflow Exploit ================================================================= !/usr/bin/env python ''' Xbmc get tag from...

XBMC 8.10 (Windows) - GET Remote Buffer Overflow

XBMC 8.10 Windows - GET Remote Buffer Overflow !/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected...

FAQ: Conficker time bomb ticks, but don't expect boom

By Elinor Mills, ZDNet News There’s been lots of hype about the fact that the latest variant of the Conficker worm is set to start communicating with other computers on the Internet on April 1 – like an April Fool’s Day time bomb with some mysterious payload. To help clear up some of the confusio...