Arab Portal 2.2 SQL Injection

!/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com ============================================= require "net/http"...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.6.2 Local File Disclosure Vulnerability ============================================================ CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009...

Arab Portal 2.2 - Blind Cookie Authentication Bypass

Arab Portal 2.2 - Blind Cookie Authentication Bypass !/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com...

DEBIAN-CVE-2009-2463

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

openSUSE Security Update : glib2 (glib2-815)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code CVE-2008-4316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : glib2 (glib2-815)

Large strings could lead to a heap overflow in the base64 encoding and decoding functions. Attackers could potentially exploit that to execute arbitrary code CVE-2008-4316. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

GLSA-200907-09 : Cyrus-SASL: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-09 Cyrus-SASL: Execution of arbitrary code James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact : A...

Cyrus-SASL: Execution of arbitrary code

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact A remote...

USN-790-1: Cyrus SASL vulnerability

James Ralston discovered that the Cyrus SASL base64 encoding function could be used unsafely. If a remote attacker sent a specially crafted request to a service that used SASL, it could lead to a loss of privacy, or crash the application, resulting in a denial of service...

Kasseler CMS (FD/XSS) Multiple Remote Vulnerabilities

No description provided by source. X X X X A K KK NN N EEEEEE TTTTTTTT X X A A K K N N N E TT XX AAAAA KK N N N EEE TT X X A A K K N N N E TT X X A A K KK N NN EEEEEE TT X X Author: Sr1pt - xaknet.ru GreetZ to all users xaknet.ru, especial: baltazar, Saint, X1mer@, Trash, Ic3, G1yuk, NEXGEN,...

Kasseler CMS File Disclosure / XSS

X X X X A K KK NN N EEEEEE TTTTTTTT X X A A K K N N N E TT XX AAAAA KK N N N EEE TT X X A A K K N N N E TT X X A A K KK N NN EEEEEE TT X X Author: Sr1pt - xaknet.ru GreetZ to all users xaknet.ru, especial: baltazar, Saint, X1mer@, Trash, Ic3, G1yuk, NEXGEN, ErrNick, deface and other .. Kasseler-C...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

Free Download Manager 2.5/3.0 (Control Server) Remote BOF Exploit

No description provided by source. !/usr/bin/python Usage : fdm.py victimeip Bug : Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit Fix : update Founder : Praveen Darshanam Tested on : Xp sp3 en Exploited by : His0k4 Greetings : All friends & muslims HaCkErs DZ import sys, socket...

Free Download Manager 2.53.0 - Control Server Remote Buffer Overflow

Free Download Manager 2.53.0 - Control Server Remote Buffer Overflow !/usr/bin/python Usage : fdm.py victimeip Bug : Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit Fix : update Founder : Praveen Darshanam Tested on : Xp sp3 en Exploited by : His0k4 Greetings : All friends & musli...

Free Download Manager 2.5/3.0 (Control Server) Remote BOF Exploit

Exploit for windows platform in category remote exploits ================================================================= Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit ================================================================= !/usr/bin/python Usage : fdm.py victimeip Bu...

Debian DSA-1813-1 : evolution-data-server - Several vulnerabilities

Several vulnerabilities have been found in evolution-data-server, the database backend server for the evolution groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0587 It was discovered that evolution-data-server is prone to integer...

[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1813-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 08, 2009 http://www.debian.org/security/faq -...