4102 matches found
phpMoneyBooks 1.0.2 - Local File Inclusion
phpMoneyBooks 1.0.2 - Local File Inclusion 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...
phpMoneyBooks 1.0.2 Local File Inclusion
Exploit for php platform in category web applications 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...
phpMoneyBooks 1.0.2 - Local File Inclusion
'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a null-byte attack on the 'module' GET parameter...
CVE-2012-1437
The Microsoft Office file parser in Comodo Antivirus 7425 allows remote attackers to bypass malware detection via an Office file with a \50\4B\53\70\58 character sequence at a certain location...
CVE-2012-1435
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a...
PyPAM Python bindings for PAM - Double-Free Corruption
PyPAM Python bindings for PAM - Double-Free Corruption === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat...
python-pam memory corruption
Memory corruption on the passwords with NULL byte...
LSE-2012-03-01: PyPAM -- Python bindings for PAM - Double Free Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption - --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM =...
Ubuntu: Security Advisory (USN-1395-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-0012
CVE-2012-0012 corresponds to a vulnerability in Microsoft Internet Explorer 9 where improper handling of string object creation/init could allow a remote attacker to read arbitrary process memory via a crafted webpage (Null Byte Information Disclosure). Connected Microsoft advisories confirm this...
Internet Explorer Null Byte Information Disclosure (MS12-010; CVE-2012-0012)
An information disclosure vulnerability has been reported in Internet Explorer...
Facebook Applications Null Byte Injection
Title ===== Facebook Application Null Byte Injection Date ==== 25/01/2012 Author ====== Bug === Null Byte Injection Introduction ============ The application is currently included and viewable by all facebook users. Facebook is a social networking service and website launched in February 2004,...
Reverse Engineering SEHOP Chain Validation
Reverse Engineering code of SEHOP Chain Validation by x90c [email protected] -- sehopchainvalidation.c -- typedef struct EXCEPTIONREGISTRATIONRECORD struct EXCEPTIONREGISTRATIONRECORD Next; PEXCEPTIONROUTINE Handler; EXCEPTIONREGISTRATIONRECORD, PEXCEPTIONREGISTRATIONRECORD; / first ER struct o...
Typo3 4.5 < 4.7 - Remote Code Execution / Local File Inclusion / Remote File Inclusion
Exploit Title: Typo3 v4.5-4.7 - Remote Code Execution RFI/LFI Date: 4th January 2012 Author: MaXe Software Link: https://typo3.org/download/ Version: 4.5.0 up to 4.5.8, 4.6.0 and 4.6.1 + development releases of 4.7 branch Typo3 v4.5-4.7 - Remote Code Execution RFI/LFI Versions Affected: 4.5.0 up ...
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416
SEC Consult Vulnerability Lab Security Advisory 20111230-0 ======================================================================= title: Microsoft ASP.NET Forms Authentication Bypass product: Microsoft .NET Framework vulnerable version: Microsoft .NET Framework Version:4.0.30319; ASP.NET...
Tiki Wiki CMS Groupware 8.2 Code Injection
------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1®exres=phpinfo®ex=//e%00/ Tiki internal filters remove all null bytes from user input, but for some strange reason this doesn't happen within admin sessions. So,...
Apple Safari "libxml"远程代码执行漏洞
BUGTRAQ ID: 48832 CVE ID: CVE-2011-0216 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari 5.0.6之前版本在libxml的实现上存在单字节溢出漏洞，攻击者可利用此漏洞在受影响应用程序下执行任意代码或造成拒绝服务。 Apple Safari 5.x Apple Safari 4.x Apple TV 4.3 Apple TV 4.2 Apple TV 4.1 Apple TV 4.0 Apple TV 2.1 Apple TV 1.0 Apple iOS 4.x 厂商补丁...
Ubuntu Update for apache2 USN-1259-1
Ubuntu Update for Linux kernel vulnerabilities USN-1259-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12591.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for apache2 USN-1259-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net
k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...
MIPS Linux XOR Shellcode Encoder 60 Bytes
MIPS Linux XOR Shellcode Encoder 60 Bytes. Shellcode exploit for linuxmips platform include include include include include include include define DEBUG 0 / entropy at phiral.net mips linux shellcode xor encoder \xAB\xCD is overwritten with jmp back offset \x00\x00 is overwritten with the byte it...