CVE-2009-0943

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...

Unrestricted file upload

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2009-1483

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Baba-Book Cross Site Scripting

=========================================================================================== Title : Multiple Cross-site Scripting XSS Vulnerabilities Software : Baba-Book Vendor : www.bp371.com Date : 26 April 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...

Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================== Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability ================================================================== Download:...

Studio Lounge Address Book 2.5 Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7 Aflawa Kamikaz Wa4ri...

Studio Lounge Address Book 2.5 - Authentication Bypass

Studio Lounge Address Book 2.5 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home:...

Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa ...

Studio Lounge Address Book 2.5 (profile) Shell Upload Vulnerability

No description provided by source. Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file:...

Studio Lounge Address Book 2.5 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7...

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file: upload-file.php The upload-file.php...

Address Book 2.5 Shell Upload

Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file: upload-file.php The upload-file.php...

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security...

Joomla Book Joomlas 0.1 SQL Injection

Salvatore "drosophila" Fresta + Application: Joomla Component combookjoomlas + Version: 0.1 + Website: http://www.alikonweb.it + Bugs: A SQL Injection + Exploitation: Remote + Dork: inurl:"index.php?option=combookjoomlas" + Date: 06 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author...

Evolution Data Server ntlm_challenge()内存内容泄露漏洞

BUGTRAQ ID: 34109 CVECAN ID: CVE-2009-0582 Evolution Data Server为地址簿、日历事件等常见的桌面信息提供单一的服务器。 Evolution Data Server所捆绑的Camel库没有正确地处理NTLM SASL报文。在camel/camel-sasl-ntlm.c的ntlmchallenge函数中，没有对从type 2拷贝到type 3报文（客户端对服务器挑战的响应）的域字符串长度验证从服务器所接收到的剩余数据： 127 ntlmsetstring ret, NTLMRESPONSEDOMAINOFFSET, 128...

Sun Java System Communications Express [HTML Injection]

Hello, I have found a HTML Injection vulnerability in Sun Java™ System Communications Express, a web client that provides an integrated web-based communication and collaboration client to the Sun Java Communications Suite. It consists of three client modules - Calendar, Address Book, and Mail. He...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...

Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090311-cucmpab Revision 1.0 For Public Release 2009 March 11 1600 UTC GMT...

Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...