avaxswf-write.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write ============================================================================ Internal ID: VULWAR200706264. Introduction ------------...

Avaxswf.dll v.1.0.0.1 from Avax Vector ActiveX Arbitrary Data Write

Exploit for unknown platform in category remote exploits =================================================================== Avaxswf.dll v.1.0.0.1 from Avax Vector ActiveX Arbitrary Data Write =================================================================== :. GOODFELLAS Security Research TEAM...

[waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

Microsoft Excel Malformed Palette Record DoS PoC (MS07-002)

No description provided by source. """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description...

Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)

""" MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs when parsing Palette Record and it causes Heap Overflow check out here -...

Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)

Microsoft Excel - Malformed Palette Record Denial of Service PoC MS07-002 """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs whe...

Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit

No description provided by source. !/usr/bin/perl /usr/bin/passwdOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Apple OSX's /usr/bin/passwd program has support for a custom passwd file to be used instead of the standard/static path. this feature has security issues in the...

CVE-2006-5175

Cross-site request forgery CSRF vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors...

Apple Mac OSX - usrbinpasswd Custom Passwd Privilege Escalation

Apple Mac OSX - usrbinpasswd Custom Passwd Privilege Escalation !/usr/bin/perl /usr/bin/passwdOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Apple OSX's /usr/bin/passwd program has support for a custom passwd file to be used instead of the standard/static path. this featu...

Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit

Exploit for macOS platform in category local exploits ================================================================= Apple Mac OS X /usr/bin/passwd Custom Passwd Local Root Exploit ================================================================= !/usr/bin/perl /usr/bin/passwdOSX: local root...

Wimpy MP3 Player 5 - Text File Overwrite

source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...

Wimpy MP3 Player 5 - Text File Overwrite

Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...

Default credentials

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...

CVE-2006-0691: Undefined Security Weakness

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...

AlienForm CGI Script Directory Traversal Vulnerability (Jun 2002) - Active Check

The AlienForm CGI script is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2002 Andrew Hintz http://guh.nu Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2005-3561 · Land Down Under · Land Down Under (Ldu) 800

Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple SQL injection issues allow remote attackers to execute arbitrary SQL commands via various parameters to different PHP files, including s or m parameter to "forums.php", o, w, s, or p parameter to...

CVE-2005-2429: Undefined Security Weakness

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

Small HTTP Server 3.05.28 - Arbitrary Data Execution

!/usr/bin/perl sHTTP FTPServer Abritary Data Execution Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\PERLperl shttp.pl localhost C:\shttps ? Version: libwww-perl-5.76 + Connect to localhost... + Connected + Send user and pass.. + Logged in! +...

Small HTTP Server <= 3.05.28 Arbitrary Data Execution Exploit

No description provided by source. !/usr/bin/perl sHTTP FTPServer Abritary Data Execution Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\PERLperl shttp.pl localhost C:\shttps ? Version: libwww-perl-5.76 + Connect to localhost... + Connected + Send...

Small HTTP Server 3.05.28 - Arbitrary Data Execution

Small HTTP Server 3.05.28 - Arbitrary Data Execution !/usr/bin/perl sHTTP FTPServer Abritary Data Execution Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\PERLperl shttp.pl localhost C:\shttps ? Version: libwww-perl-5.76 + Connect to localhost... ...