9669 matches found
Design/Logic Flaw
Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...
CVE-2009-3860
Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...
Spider Solitaire - Denial of Service (PoC)
Spider Solitaire - Denial of Service PoC...
Spider Solitaire Local Crash
...
Spider Solitaire PoC
No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...
Linux Kernel sg_build_indirect函数本地拒绝服务漏洞
CVE ID: CVE-2009-3288 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/scsi/sg.c文件中的sgbuildindirect函数在访问数组时使用了错误的变量，这允许本地攻击者通过使用xcdroast复制CD导致内核崩溃和空指针引用。仅有可打开光驱设备的用户才可以利用这个漏洞。 Linux kernel 2.6.28-rc1 - 2.6.31-rc8 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
Fedora Core 10 FEDORA-2009-8802 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-8802. OpenVAS Vulnerability Test $Id: fcore20098802.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8802 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Fedora Core 11 FEDORA-2009-8800 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 10 FEDORA-2009-8802 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-8802. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 11 FEDORA-2009-8800 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. OpenVAS Vulnerability Test $Id: fcore20098800.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8800 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-7056
BandSite CMS 1.1.4 is affected by CVE-2008-7056 due to missing access control on adminpanel/phpmydump.php, enabling remote attackers to directly request the file and obtain copies of the database. This is documented across NVD/NVD-CVE records and related CVE aggregations. The available descriptio...
Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)
Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...
Fedora 10 : qt-4.5.2-2.fc10 (2009-8802)
Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File !/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
Soritong MP3 Player 1.0 - SKIN Local Stack Overflow (PoC) (SEH)
Soritong MP3 Player 1.0 - SKIN Local Stack Overflow PoC SEH Soritong MP3 Player 1.0 SKIN Local Stack Overflow PoC Seh First:http://milw0rm.com/exploits/8624 By: ThE g0bL!N my $crash="\x41" x 5000 ; just random openmyfile,'UI.txt' ; print myfile $crash; Usage: After Clicking On file Perl Copy TXT...
COMRaider Insecure Method
!/usr/bin/perl COMRaider Idefense Labs CreateFolder and Copy Insecure Method Hard Disk Filler Exploit Discovered and Exploited by : Khashayar Fereidani Http://IRCRASH.com & Http://Fereidani.ir Help : perl comraider.pl Please enter the foldername C:\ircrash\ for example : C:\ircrash\ Please ente...
IIS write permissions vulnerability principle&use of tools Manual Version-bug warning-the black bar safety net
Very old stuff, strictly speaking, not a vulnerability, just set up poorly causing the Bug. Eight hundred years of encounter less than a, the result a few days ago the misfortune to run into. With JSKY scan People's station, the results of the scanner actually directly to the people of the whole...