2191 matches found
Null pointer dereference
ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...
[Full-disclosure] Miva Merchant 4.x Tax Calculation Bypass Vulnerability w/ PoC
Miva Merchant is one of the largest non-free online shopping carts used by bulk web-hosting sites. Miva allows small to medium shops to get online and sell their products without the hassle of learning to code custom scripts that would probably do much more for much less money. All this simplicit...
Windows LoadImage integer overflow
Integer overflow on bitmap size calculation...
IPSwitch IMail Server 8.1 - Local Password Decryption Utility
IPSwitch IMail Server 8.1 - Local Password Decryption Utility / IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In...
Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite
Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite // source: https://www.securityfocus.com/bid/10196/info Reportedly the Unreal Tournament Engine is affected by a local file overwrite vulnerability due to the UMOD manifest.ini file. This issue is due to an input...
Linux ICMP information leak
Because of invalid size calculation for SMTP packet with error code, it contains data from memory...
CVE-2002-1196
editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set...
MSIEv6 % encoding causes a problem again
it's about cross-site scripting at MSIEv6 client side using encoding, but not the same as the one by PeaceFire.org which doesn't work on my PC. testedMSIEv6CN version IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...
gnome_segv - Local Buffer Overflow
/ gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/9/2000 This exploit was coded at overfiens in cali. Shouts to overfien and skeptik... h00t h00t. Bug found by skeptik. Tested on SuSE 6.4/2.2.14 non sid by default, p.o.e. only. ...
GLIBC (via /bin/su) Local Root Exploit
Exploit for linux platform in category local exploits ====================================== GLIBC via /bin/su Local Root Exploit ====================================== / Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of...
