269 matches found
Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection
Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...
URL Spoofing vulnerabilities in browsers and search engines
Hello 3APA3A! I continue the topic, which I begun in previous two advisories about URL Spoofing vulnerability http://websecurity.com.ua/3079/ in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3096/, which also can exists in bots of other search engines. And I tel...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== glFusion = 4.1 php.ini independent google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...
Nokia Multimedia Player 1.1 Heap Overflow
Nokia Multimedia Player version 1.1 .m3u Heap Overflow PoC exploit by 0in aka zer0in from Dark-Coders Group! 0in.emailatgmail.com / 0inatdark-coders.pl http://www.Dark-Coders.pl Special thx to doctor for together analyse this shi and sun8hclf for tell me.. "to unicode." Greetings to:...
Nokia MultiMedia Player 1.1 - .m3u Heap Buffer Overflow
Nokia MultiMedia Player 1.1 - .m3u Heap Buffer Overflow source: https://www.securityfocus.com/bid/33586/info Nokia Multimedia Player is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this iss...
Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)
No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 5345)
This version upgrade php5 to 5.2.6 fixes several security vulnerabilities. - Fixed possible stack-based buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin. - Fixed integer overflow in printf identified by Maksymilian Aciemowicz. - Fixed security issue detailed in CVE-2008-0599...
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow / Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date :...
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
/ Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date : 11.06.2008-14.06.2008 Exploit writer : Heretic2 [email protected]...
sg-overflow.txt
SecurityGateway 1.0.1 Remote Buffer Overflow username Vendor: http://www.altn.com/ risk : critical SecurityGateway open port 4000 for remote administration/managment, EIP get owned when the username field is filled with 720 chars eax=00000000 ebx=00000000 ecx=63636363 edx=7c9137d8 esi=00000000...
Debian DSA-1578-1 : php4 - several vulnerabilities
Several vulnerabilities have been discovered in PHP version 4, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3799 The sessionstart function allows remote attackers to insert arbitrary attributes int...
Debian DSA-1572-1 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3806 The glob function allows context-dependent attackers to cause a denial of service and possibly...
DSA-1572-1 php5 - several vulnerabilities
Bulletin has no description...
CVE-2008-2051
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...
Design/Logic Flaw
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...
CVE-2008-2051
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...
PHP < 5.2.6 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.6. Such versions may be affected by the following issues : - A stack-based buffer overflow in FastCGI SAPI. - An integer overflow in printf. - An security issue arising from improper calculation of the leng...
IBM Domino Web Access Upload Module inotes6.dll BoF Exploit
No description provided by source. !-- written by e.b. IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit Bad chars: 0x80+ CVE-2007-4474 Tested on Windows XP SP2fully patched English, IE6, inotes6.dll version 6.0.40.0 and version 6.0.48.0...
CVE-2007-6526
Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...
fsfdt-overflow.txt
$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...