779 matches found
Eureka Mail Client Buffer Overflow
Application: Eureka Mail client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's Special Thanks to: M Jeremy Brown 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Sick of...
Mozilla Firefox PKCS11 Module Installation Code Execution
Added: 09/24/2009 CVE: CVE-2009-3076 BID: 36343 OSVDB: 57977 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem The warning dialog displayed when adding or removing security modules via pkcs11.addmodule or pkcs11.deletemodule can be customized by a...
Phishing Tool
Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...
[SECURITY] Fedora 10 Update: kdebase-workspace-4.3.1-1.fc10
The KDE Workspace consists of what is the desktop of the KDE Desktop Environment. This package contains: khotkeys a hotkey daemon klipper a cut & paste history utility kmenuedit the menu editor krandrtray resize and rotate X screens krunner a command run interface ksysguard a performance monitor...
Discuz! admin\styles.inc.php get-webshell bug
在文件admin\styles.inc.php里代码: if$newcvar && $newcsubst if$db-resultfirst"SELECT COUNT FROM $tableprestylevars WHERE variable='$newcvar' AND styleid='$id'" cpmsg'styleseditvariableduplicate', '', 'error'; elseif!pregmatch"/a-zA-Z\x7f-\xffa-zA-Z0-9\x7f-\xff/", $newcvar cpmsg'styleseditvariableillegal...
ECShop shop system<=V2. 6. 2 the background to get webshell-vulnerability warning-the black bar safety net
ECSHOP is an open source free online store system. By the professional development team upgrade and maintenance, to provide you with timely and efficient technical support, you can also according to their own business characteristics of ECSHOP be customized to increase their own store features...
Abee Chm Maker 1.9.5 - '.CMP' Local Stack Overflow
exploit.py Abee Chm Maker 1.9.5 Stack overflow Exploit By:Encrypt3d.M!nd After importing "Devilinside.cmp" file into the program go to FileMake CHM.. Then...watch : . i've used SEH overwrite method to make it more stable. btw:it's universal so don't bother your self with finding addresses ; ns =...
Fedora Update for mutt FEDORA-2007-540
Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-540 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for mutt FEDORA-2007-539
Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-539 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 9 Update: enscript-1.6.4-10.fc9
GNU enscript is a free replacement for Adobe's Enscript program. Enscript converts ASCII files to PostScriptTM and spools generated PostScript output to the specified printer or saves it to a file. Enscript can be extended to handle different output media and includes many options for customizing...
SuSE 10 Security Update : net-snmp (ZYPP Patch Number 5422)
This security update of net-snmp fixes a denial of service vulnerability CVE-2008-2292, an authentication bypass CVE-2008-0960 and several memory leaks. In addition net-snmp was patched to allow customization of the agent address set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
Online Rental Property Script <= 4.5 (pid) SQL Injection Vulnerability
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /| /\ / / / / / .OR.ID ECHOADV91$2008 ----------------------------------------------------------------------------------------- ECHOADV91$2008 Online Rental Property Script = 4.5 pid Blind Sql Injection Vulnerability...
[SECURITY] Fedora 7 Update: icu-3.6-20.fc7
The International Components for Unicode ICU libraries provide robust and full-featured Unicode services on a wide variety of platforms. ICU supports the most current version of the Unicode standard, and they provide support for supplementary Unicode characters needed for GB 18030 repertoire...
[SECURITY] Fedora 8 Update: xfce4-notes-plugin-1.6.0-2.fc8
This plugin provides sticky notes for your desktop. You can create a note by clicking on the customizable icon with the middle button of your mouse, show/hide the notes using the left one, edit the titlebar, change the notes background color and much more...
[SECURITY] Fedora 7 Update: proftpd-1.3.1-2.fc7
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
CVE-2007-3484
Cross-site scripting XSS vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this issue is disputed by the Google Security Team, who states that "Google does not provide the 'search.php' script...
[SECURITY] Fedora Core 5 Update: mutt-1.4.2.1-8.fc5
Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use...
SOL6339 - Sendmail race condition - VU#834865
F5 Networks Product Development tracked this issue and it was fixed in BIG-IP and 3-DNS version 4.5.11 for the 4.5 software branch and in version 4.6.2 for the 4.6 software branch. F5 Networks Product Development tracked this issue and it was fixed in WebAccelerator version 5.2 for the 5.x softwa...
weatimages-rfi.txt
RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl: index.php?inilangpack= Author:Co-Sarper-Der...
Weatimages 1.7.1 - ini[langpack] Remote File Inclusion
Weatimages 1.7.1 - inilangpack Remote File Inclusion RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl:...