722 matches found
ghostscript -- buffer overflow vulnerability
SecurityFocus reports: Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with arbitrary dat...
PHPStore PHP Job Search Script Remote File Upload Vulnerability
No description provided by source. PHPStore Job Search Remote File Upload Author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------- exploit: you add this code your shell to head GIF89a; example...
V-Webmail 1.6.4 - '/includes/pear/System.php?CONFIG[pear_dir]' Remote File Inclusion
source: https://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attack...
Unfixed XSS vulnerability at www.blades.com
Security researcher Uber0n, has submitted on 13/05/2008 a cross-site-scripting XSS vulnerability affecting www.blades.com, which at the time of submission ranked 422179 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is currently...
CoronaMatrix phpAddressBook 2.0 - 'username' Cross-Site Scripting Vulnerability
CoronaMatrix phpAddressBook 2.0 'username' Cross Site Scripting Vulnerability. CVE-2008-6646. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29005/info phpAddressBook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied...
Axis IP cameras crossite scripting
It's possible to spoof video content by using crossite scripting attacks...
SisfoKampus - dwoprn.php Arbitrary File Download
SisfoKampus - dwoprn.php Arbitrary File Download source: https://www.securityfocus.com/bid/25617/info Sisfo Kampus is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download...
Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow
Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...
4 5 can get to the Webshell program-vulnerability warning-the black bar safety net
To GoogLe,search some keywords,edit. asp? Korean broiler chickens is more,the majority of MSSQLdatabase!--- I see..really a lot...you can use this..asp?=" pig" Oh 2, To Google ,site:cq. cn inurl:asp 3, The use of mining chicken and an ASP Trojan. The file name is login. asp The path set is/manage...
JVN#48566866 ColdFusion error page cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected ColdFusion MX 6.X ColdFusion MX 7.X For more information, refer to the vendor's website...
Unfixed XSS vulnerability at www.cemfi.es
Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.cemfi.es, which at the time of submission ranked 1922229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...
enemies-of-carlotta mailing list processor shell characters
Shell characters problem on e-mail address parsing...
MS Windows Wkssvc NetrJoinDomain2 Stack Overflow Exploit (MS06-070)
No description provided by source. / Microsoft Windows Wkssvc NetrJoinDomain2 Stack OverflowMS06-070 Exploit by cocoruderfrankruderathotmail.com,2006.11.15 page:http://ruder.cdut.net/default.asp Code fixed by S A Stevens - 17.11.2006 - changed shellcode, Changed code to correct jmp EBX address an...
Moodle Blog 1.18.2.2/1.6.2 Module - SQL Injection
source: https://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities ...
cPanel OpenBaseDir Bypass
Hey when you try to run a phpshell and open BaseDir is on you will se that: Open base dir: /home//:/usr/lib/php:/usr/local/lib/php:/tmp Okey.. now run the phpshell with user like that: http://server..com//phpshell.php you will see that: Open base dir: OFF not secure...
With a batch of home batch write hung it to the code-vulnerability warning-the black bar safety net
Author: nerve-wracking Previously in online found a batch of home added to the hanging horse generation to horse software,you have the idea with the batch to achieve this functionality Today I learned the point of the batch,just came up with,not so perfect,or then again...later in the modified Us...
phpBB 2.0.17 remote avatar size bug
Title: phpBB remote avatar size bug Software: phpBB 2.0.17 and maybe prior versions Discovered by: David Sopas Ferreira david at systemsecure dot org Original link: http://www.systemsecure.org/ssforum/viewtopic.php?t=272 » Email from phpBB « Your report "Avatar size" has been closed because your...
NETFile FTP/Web Server Directory Traversal Arbitrary File Access
The version of NETFile FTP/Web server installed on the remote host is prone to directory traversal attacks. Specifically, an attacker can create directories outside the server's folder path with a specially crafted URL. The attacker may also be able to delete arbitrary files and directories on th...
[Full-Disclosure] unarj dir-transversal bug (../../../..)
yyoo wwaassssuupppp???????????????? ddoouubblleess iiss hheerree ttoo rroocckk ddaa hhoouussee nndd ttoo tthhrrooww uunnaarrjj ddiirr- - ttrraannssvveerrssaall bbuugg iinn yyaarr ffaaccee!! ''''uunnaarrjj ee'''' uunnppaacckkss aallll ddaa sshhiitt ttoo ddaa ccuurrrreenntt ddiirr ''''uunnaarrjj...
GLSA-200408-07 : Horde-IMP: Input validation vulnerability for Internet Explorer users
The remote host is affected by the vulnerability described in GLSA-200408-07 Horde-IMP: Input validation vulnerability for Internet Explorer users Horde-IMP fails to properly sanitize email messages that contain malicious HTML or script code so that it is not safe for users of Internet Explorer...