JVN#25448394 Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history

Sleipnir and Grani, web browsers from Fenrir & Co., have a bookmark search function. When a user runs the search function, the search result is displayed in the web browser. If a specially crafted string is used in a search, an arbitrary script may be executed on the user's web browser when the...

lama-rfi.txt

+----------------------------------------------------------------------------+ Lama Software kostenlos Remote file include Scripts : Lama Software kostenlos Discovered By : QTRinux Scripts site : http://www.lama-software.de/ Thanks To : Tryag.cc cold z3ro HackTeach.org AlQaTaRi Mr.sh4r3s POISON...

JVN#65427327 Sleipnir and Grani Bookmark Search vulnerable to arbitrary script execution

Sleipnir and Grani, web browsers from Fenrir & Co., have a bookmark search function. When a user runs the search function, the search result is displayed in the web browser. If a specially crafted URL is registered to the bookmark, an attacker could execute an arbitrary script on the user's web...

IE 6 / Ademco co. ltd. ATNBaseLoader100 Module Remote BoF Exploit

No description provided by source. !-- IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module ATNBaseLoader100.dll 5, 4, 0, 6 remote buffer overflow exploit / XP SP2 it version by rgod site: retrogod.altervista.org this activex is installed browsing some webcam pages try this google dork:...

Microsoft Internet Explorer 6 Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow

Microsoft Internet Explorer 6 Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow 'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add SCODE =...

Microsoft Internet Explorer 6 / Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow

'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add SCODE =...

JVN#92832583 Advance-Flow cross-site scripting vulnerability

Advance-Flow provided by OSK Co. LTD contains a cross-site scripting vulnerability, as it does not properly handle output data. Some application forms are not affected by this vulnerability and some are, depending on the contents of the application forms. Impact An arbitrary script may be execute...

fus-rfi.txt

============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina & jipank ----------------------------------------------------------- Software: File Upload System V1.0 Script Demo: http://demo.free-php-scripts.net/FileUpload Method: file inclusion...

WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 path = Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$...

HYSA-2006-003 Oi! Email Marketing 3.0 SQL Injection

------------------------------------------------------ HYSA-2006-003 h4cky0u.org Advisory 012 ------------------------------------------------------ Date - Thu Feb 24 2006 TITLE: ====== Oi! Email Marketing 3.0 SQL Injection SEVERITY: ========= High SOFTWARE: ========= Oi! Email Marketing 3.0. Pri...

[SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability

---------------------------------------------------------------------- SNS Advisory No.84 Oracle Application Server HTTP Response Splitting Vulnerability Problem first discovered on: Tue, 01 Feb 2005 Published on: Tue, 21 Oct 2005...

IRIX pmpost vulnerability

SGI Security Advisory Title: pmpost vulnerability Number: 20010601-01-I Date: June 24, 2002 Reference: SGI Security Advisory 20010601-01-A Reference: CVE-2001-0823 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the Performance Co-Pilot...

IRIX pmcd Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: pmcd Denial of Service vulnerability Number: 20020407-01-I Date: April 30, 2002 Reference: CAN-2000-1193 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that it is possible to feed...

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open...

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems. A...

CVE-2001-0823

The CVE-2001-0823 entry documents a local privilege escalation in the Performance Co-Pilot (PCP) package via the pmpost utility, prior to version 2.2.1-3. An attacker can exploit a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR) to gain root/privilege access. The underly...

CVE-2001-0823

The pmpost program in Performance Co-Pilot PCP before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory PCPLOGDIR...

Extracting a 3DES key from an IBM 4758

Extracting a 3DES key from an IBM 4758 The IBM 4758 is an extremely secure crytographic co-processor. It is used by banking systems and in other security conscious applications to hold keying material. It is designed to make it impossible to extract this keying material unless you have the correc...

SGI Performance Co-Pilot 2.1.x/2.2 - pmpost Symbolic Link

// source: https://www.securityfocus.com/bid/2887/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems. One of th...

Co-install Update 8 (VS) for VS 2010 Service Pack 1

hidden coinstall...