Sad Ravens Click Counter 1.0 - passwd.dat File Disclosure

Sad Ravens Click Counter 1.0 - passwd.dat File Disclosure !/usr/bin/python Portal Name: Sad Raven's Click Counter version : 1.0 'Google Dork : Sad Raven's Click Counter v1.0 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] import urllib import s...

Sad Raven's Click Counter 1.0 - 'passwd.dat' File Disclosure

!/usr/bin/python Portal Name: Sad Raven's Click Counter version : 1.0 'Google Dork : Sad Raven's Click Counter v1.0 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] import urllib import sys import parser serv="http://" i=0 for arg in sys.argv:...

PsychoStats v3.1 XSS

PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...

kernel-xen 3.1.1 does not prevent modification of the CR4 TSC from applications (DoS possible)

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service crash...

CVE-2008-4146

Addalink 1.0 beta 4 and earlier allows remote attackers to 1 approve web-site additions via a modified approved field and 2 change the visit-counter value via a modified counter field...

Code injection

Addalink 1.0 beta 4 and earlier allows remote attackers to 1 approve web-site additions via a modified approved field and 2 change the visit-counter value via a modified counter field...

SQL Injection vulnerability in Simple Download Counter

Здравствуйте 3APA3A! Сообщаю вам о найденной мною SQL Injection уязвимости в Simple Download Counter. SQL Injection: Её можно использовать как для получения информации в частности других веб приложений с БД: http://site/xmlout.php?file='20union20select2020from20table/ Так и для проведения DoS ата...

CVE-2008-4146

Affected software: Addalink 1.0 beta 4 and earlier. Vulnerable component/function: website configuration fields processed by Addalink that allow remote modification. Root cause/impact: an attacker can remotely alter the approved field to approve site additions and modify the counter field to chan...

CVE-2008-4146: Improper Authentication

Addalink 1.0 beta 4 and earlier allows remote attackers to 1 approve web-site additions via a modified approved field and 2 change the visit-counter value via a modified counter field...

mozilla: CSS reference counter overflow (ZDI-CAN-349)

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...

mozilla: CSS reference counter overflow (ZDI-CAN-349)

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...

mozilla: CSS reference counter overflow (ZDI-CAN-349)

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...

Remote code execution by overflowing CSS reference counter — Mozilla

An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla's internal CSSValue array data structure. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large numbe...

fuzzylime (cms) 3.01 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

fuzzylime cms 3.01 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

Fuzzylime CMS 3.01 - Remote Command Execution

Fuzzylime CMS 3.01 - Remote Command Execution !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

Fuzzylime CMS 3.01 - Remote Command Execution

!/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in /code/counter/middleindexinc.php USAGE: Run exploit: perl...

CVE-2008-2785

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...

CVE-2008-2785

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...

CVE-2008-2785: Undefined Security Weakness

Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array aka nsCSSValue:Array data structure, which allows remote attackers to execute arbitrary code vi...