BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ===================================================================== BrowseDialog Class ccrpbds6.dll Internet Explorer Denial of Service ===================================================================== argCount = 1 arg1=String2000000, "A"...

BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service

BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...

BrowseDialog Class 'ccrpbds6.dll' Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...

Design/Logic Flaw

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...

CVE-2007-0014

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...

Fedora Core 6 : mono-1.1.17.1-4.fc6 (2007-067)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

CVE-2007-0014: Undefined Security Weakness

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...

CVE-2007-0014

The CVE-2007-0014 issue concerns ChainKey Java Code Protection. Affected component: a Java class loader with a modified defineClass method that saves the bytecode to a file before passing it to the JVM, enabling decompilation of Java class files. The vulnerability is described as a local-attack r...

Fedora Core 5 : mono-1.1.13.7-3.fc5.1 (2007-068)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

[SECURITY] Fedora Core 6 Update: mono-1.1.17.1-4.fc6

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Buffer overflow

Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...

magic photo storage website Remote File Inclusion

magic photo storage website Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug;...

CVE-2007-0113: Undefined Security Weakness

Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...

swcms.php.txt

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

hlstats-sql.txt

Hlstats is more than 5 years old. HLstats has been downloaded more than 270,000 from http://sf.net. Nothing more than absolutely benign XSS has been reported for this application, until NOW. Merry Christmass, --Michael Brooks Homepage: http://sourceforge.net/projects/hlstats/ -----BEGIN PGP SIGNE...

HLStats 1.34 - 'hlstats.php' SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...

Typo3 Class.TX_RTEHTMLArea_PI1.PHP多个命令执行漏洞

Typo3是一款基于PHP的WEB应用程序。 Typo3不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'useruid'参数缺少过滤，提交包含SHELL元字符命令的字符串作为参数数据，可导致以WEB权限执行任意命令。 Typo3 Typo3 4.0.3 Typo3 Typo3 4.0.2 Typo3 Typo3 4.0.1 Typo3 Typo3 3.7 .0 Typo3 Typo3 4.0 Typo3 Typo3 3.8 http://typo3.org/ Attackers can exploit these issues via ...

DEBIAN-CVE-2006-6104

The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to 1 read source code by appending a space %20 to a URI, and 2 read credentials via a request for Web.Config%20...

CA BrightStor ARCserve Backup Discovery Service Detection

The remote server appears to be running BrightStor ARCserve Backup, an enterprise class backup program. The software's Discovery Service listens for broadcast packets from other BrightStor servers on the local network to learn about their existence. C Tenable Network Security, Inc...

DotProject Query.Class.PHP远程文件包含漏洞

DotProject是一款基于PHP的WEB应用程序。 DotProject不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'Query.Class.PHP'脚本对用户提交的'baseDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Dotproject Dotproject 2.0.4 Dotproject Dotproject 2.0.3 Dotproject Dotproject 2.0.1 Dotproject Dotproject 2.0 NO...