4101 matches found
Scarecrow enterprise Station management system wide byte injection exploit-vulnerability warning-the black bar safety net
Scarecrow enterprise Station based on php+sqlite and php+mysql two versions, php+sqlite features and asp+access almost,the advantage is in favor of the backup, now mostly web space to support php+sqlite. php+mysql features is conducive to processing large amounts of data, but backup and restore i...
Python: Memory corruption in audioop module
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service memory corruption and application crash via crafted arguments, as demonstrated by a call to...
Design/Logic Flaw
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service daemon crash via an Active Directory login...
PHP <5.2.12 htmlspecialcharacters()畸形多字节字符跨站脚本攻击漏洞
No description provided by source...
Vulnerabilities in Microsoft Reader and HIS
Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...
CVE-2011-0101
Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."...
Memory corruption
Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."...
Microsoft Reader 2.1.1.3143 - Null Byte Write
Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: | 8D47 01 |LEA EAX,DWORD PTR DS:EDI+1 ; size at offset 0xbd of the PoC 5FFF634D |. 50 |PUSH EAX 5FFF634E |. E8 2B470000 |CALL ; malloc...
Microsoft Reader 2.1.1.3143 - Null Byte Write
Microsoft Reader 2.1.1.3143 - Null Byte Write Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: | 8D47 01 |LEA EAX,DWORD PTR DS:EDI+1 ; size at offset 0xbd of the PoC 5FFF634D |. 50 |PUSH EAX 5FFF634E |. E8 2B470000 |CALL...
Microsoft Office Excel RealTimeData Record Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the methods used f...
Microsoft Windows XP - afd.sys Local Kernel Denial of Service
Microsoft Windows XP - afd.sys Local Kernel Denial of Service //////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp AFD.sys Local Kernel DoS Exploit // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable:...
Fedora Update for mono FEDORA-2011-3393
Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2011-3393 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
dir cms width byte injection vulnerability-vulnerability warning-the black bar safety net
| Description: unintentionally black box found dircms there is a wide byte to bring the injection problem, although popular over a period of time, looks like now people are not too concerned about this issue. Tested under found there are two places there is a problem: 1. http://demo. dircms...
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
Quick Polls Local File Inclusion and Deletion Vulnerabilities
Exploit for php platform in category web applications 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loc...
Quick Polls - Local File Inclusion / Deletion
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
Quick Polls - Local File Inclusion Deletion
Quick Polls - Local File Inclusion Deletion 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loca...
Quick Polls 1.0.1 Local File Inclusion / Deletion
'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...
RHEL 4 : bash (RHSA-2011:0261)
Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
Multiple Vulnerabilities in Podcast Generator
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Podcast Generator which could be exploited to perform cross-site scripting attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Cross-site scripting vulnerability in Podcast...