CVE-2008-3863

Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename...

CVE-2008-3863

Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename...

CVE-2008-3863

Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename...

GNU Enscript src/psgen.c栈溢出漏洞

BUGTRAQ ID: 31858 CVECAN ID: CVE-2008-3863 GNU enscript是用于替换Adobe enscript程序的脚本。Enscript可将ASCII文件转换为PostScript并将生成的PostScript输出提供给指定的打印机。 GNU enscript src/psgen.c文件中的readspecialescape函数存在栈溢出漏洞。如果用户通过-e选项启用了特殊转义处理的话，在转换恶意文件时就可能触发这个溢出，导致执行任意指令。 GNU Enscript 1.6.4 beta GNU Enscript 1.6.1 GNU ---...

WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= WBB Plugin rGallery 1.09 itemID Blind SQL Injection Exploit ============================================================= import sys, urllib2, re print "\n " print " \'/ " print...

TorrentTrader Classic <= 1.04 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== TorrentTrader Classic TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

!/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x + Mail: electron1x at mail dot ru...

IP Reg &lt;= 0.4 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...

ADN Forum 1.0b - Insecure Cookie Handling

ADN Forum 1.0b - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and...

ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== ADN Forum = 1.0b Insecure Cookie Handling Vulnerability ======================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum =...

win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes

Exploit for win32 platform in category shellcode ================================================================== win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes ================================================================== / PEB Kernel32.dll ImageBase Finder Ascii Printab...

/bin/sh Polymorphic shellcode with printable ASCII characters

No description provided by source. ======================================================================== /bin/sh Polymorphic shellcode with printable ASCII characters ======================================================================== A paper by the FHM crew: http://fhm.noblogs.org Contac...

/bin/sh Polymorphic shellcode with printable ASCII characters

/bin/sh Polymorphic shellcode with printable ASCII characters. Shellcode exploit for generator platform ======================================================================== /bin/sh Polymorphic shellcode with printable ASCII characters...

Dana IRC 1.4a Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl ksOSe - 08/24/2008 This is a useless and not portable exploit code, tested only on my winxp-sp3 VM. I was looking for a vuln to write an exploit for when I found this PoC: http://www.milw0rm.com/exploits/5817 The author wrote: "The reason why ther...

webeditioncms-sql.txt

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."'and+asciisubstringsel...

Security Best Practice: Familiarize Yourself with the ASCII Only Response Headers Protection

HTTP Protocol Inspection provides strict enforcement of the HTTP protocol, ensuring these sessions comply with RFC standards and common security practices. Various attacks use binary and other non-ASCII characters to deliver worms and other malicious content to web servers...

Outpost Security Suite Pro文件名解析安全绕过漏洞

BUGTRAQ ID: 30347 CNCAN ID：CNCAN-2008072305 Outpost Security Suite Pro是一款集合反病毒和反木马功能的专业防火墙安全套装。 Outpost Security Suite Pro处理文件名存在问题，远程攻击者可以利用漏洞绕过扫描，导致恶意程序在系统上信任执行。 特殊字符构建的文件名可绕过病毒保护，导致恶意文件不被检测到，另外使用特殊的字符构建文件名，可导致运行时不被防火墙阻止。 Outpost Security Suite Pro 目前没有解决方案提供：...

intellitamper-exec.txt

!/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 345 bad char - \x89 my $shellcode =...

Pidgin MSN协议文件名处理拒绝服务漏洞

BUGTRAQ ID: 29956 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的libpurple/protocols/msnp9/slplink.c文件中的msnslplinkprocessmsg函数在处理MSN P2P文件传输请求时存在使用后释放漏洞，如果用户受骗接收了带有特制文件名的文件的话，就会引用之前已经释放的内存，导致拒绝服务。 Pidgin 2.4.1 Pidgin ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://pidgin.im/pidgin/home/ 创建包含有以下字符的文件...

Mambo Component Articles (artid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Mambo Component Articles artid Blind SQL Injection Exploit ============================================================ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...