MAILsweeper - SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2 & 5.2.1 - File Scanner Malicious Archive DoS

No description provided by source. source: http://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content. These products handle compressed files by temporarily unzipping them and...

Quick Square Development Honeycomb Archive 3.0 CategoryResults.cfm Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15995/info HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit

No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...

Nortel Contact Recording Centralized Archive 6.5.1 - SQL Injection Exploit

No description provided by source. ?php / Nortel Contact Recording Centralized Archive 6.5.1 EyrAPIConfiguration Web Service getSubKeys Remote SQL Injection Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft SQL Server 2005 Express download uri:...

GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)

No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net Special Thanx : Vampire , s3rv3rhack3r / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / \ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir DeltaHAcking Team website:...

L-Soft Listserv 1.8 Web Archives Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1167/info The Web Archive component of L-Soft Listserv contains unchecked buffer code exploitable by sending specially crafted requests to the Web Archive. This weakness will allow execution of arbitrary code by remote...

phpfreeBB 1.0 - Remote BLIND SQL Injection Vulnerability

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : [email protected]...

Optimal Archive 1.38 - (.zip) SEH PoC 0day

No description provided by source. !/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En Advisory:...

RarCrack 0.2 - Buffer Overflow Proof Of Concept

No description provided by source. !/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack 0.2 Buffer Overflow POC Date: 19.09.2010 Author: TheUnKn@wn Email: theunknown at group51.org Twitter: @TheUnKn0wn...

WinRAR 2.90/3.0/3.10 Archive File Extension Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6664/info A vulnerability has been discovered in WinRAR. The problem occurs when the affected application opens an archive containing a file with an overly long file extension. It has been reported that it is possible for...

Woltlab Burning Board 2.3.4 File Disclosure Vulnerability

No description provided by source. Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability Date: 2010-11-12 Author: SFX Version: 2.3.4 CVE : N/A After you've used the Exploit to get the admin account: goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder import: acp/lib...

ProFTPD-1.3.3c Backdoor Command Execution

No description provided by source. $Id: proftpd133cbackdoor.rb 11214 2010-12-03 12:34:38Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Unalz 0.x Archive Filename Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit this...

LHA 1.x Multiple extract_one Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10354/info LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. These issues are triggered in the...

Apache Tomcat Manager Application Deployer Authenticated Code Execution

No description provided by source. $Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand...

[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

CVE-2014-4039

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf...

DEBIAN-CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...