3063 matches found
Debian DSA-1170-1 : gcc-3.4 - missing sanity check
Jurgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...
Alvila Avast! antivirus buffer overflow
Buffer overflow on LHA archives parsing...
[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...
DSA-1170 gcc-3.4 - missing sanity check
Bulletin has no description...
Compression Plus library buffer overflow
Buffer overflow on Zoo archives parsing...
BlogCMS.txt
Blog:Cms = 4.1.0 Remote Inclusion File Bug Found by Drago84 ToxiC CreW Site Vendor :http://blogcms.com/ Page affetc: index.php media.php archive.php archives.php blog.php The Problem is: include$DIRPLUGINS."related/nusoap.php"; Expl:...
OZJournal15.txt
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
LHAZ archiver buffer overflow
Buffer overflow on oversized filename during JZH archives parsing...
CVE-2005-2529
Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."...
OZJournal v1.5 - XSS
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...
CVE-2006-3901
Multiple stack-based buffer overflows in Tumbleweed Email Firewall EMF allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a 1 file or 2 directory with a long LHA extended header, 3 an LHA archive in which the "temporary pathname" field for...
[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
DynaZip buffer overflow
Buffer overflows in DZIP32.DLL/DZIPS32.DLL libraries on ZIP archives processing...
[SECURITY] [DSA 1110-1] New samba packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1110-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 16th, 2006 http://www.debian.org/security/faq -...
WinRAR 3.60 Beta 6 (French) - SFX Path Local Stack Overflow
WinRAR 3.60 Beta 6 French - SFX Path Local Stack Overflow """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts XP SP2 French...
WinRAR <= 3.60 beta 6 (SFX Path) Local Stack Overflow Exploit (french)
Exploit for unknown platform in category local exploits ====================================================================== WinRAR = 3.60 beta 6 SFX Path Local Stack Overflow Exploit french ====================================================================== """ WinRAR - Stack Overflows in...
WinRAR 3.60 Beta 6 - SFX Path Local Stack Overflow
""" WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts """ import os, sys winrar = 'C:\WinRAR.exe' sfxnfo = "comment.txt" resu...
WinRAR <= 3.60 beta 6 (SFX Path) Local Stack Overflow Exploit
No description provided by source. """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts """ import os, sys winrar =...
WinRAR <= 3.60 beta 6 (SFX Path) Local Stack Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================= WinRAR = 3.60 beta 6 SFX Path Local Stack Overflow Exploit ============================================================= """ WinRAR - Stack Overflows in SelF - eXtracting Archives...