CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

CCITTFaxStream:: lookChar()

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

DEBIAN-CVE-2007-4840

PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the outcharset parameter to the iconv function; or a long string in the charset parameter to the 2 iconvmimedecodeheaders, 3 iconvmimedecode, or 4 iconvstrlen function...

Null pointer dereference

The decodechoice function in net/netfilter/nfconntrackh323asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service crash via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer...

DEBIAN-CVE-2007-3121

Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library ZVBI before 0.2.25 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via long data during a reception error. NOTE: some of these details...

php security update

CentOS Errata and Security Advisory CESA-2007:0154-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC

Exploit for linux platform in category dos / poc ========================================================== PHP 4.4.5 / 4.4.6 sessiondecode Double Free Exploit PoC ========================================================== ?php...

php session extension global variable clobber

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...

Virtual Calendar <= (pwd.txt) Remote Password Disclosur Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Virtual Calendar = pwd.txt Remote Password Disclosur Vulnerability Script: Virtual Calendar DorK: "intitle:Virtual intitle:Calendar intitle:Demo" URL:...

RANDOM PHP QUOTE 1.0 (pwd.txt) Remote Password Disclosur

RANDOM PHP QUOTE 1.0 pwd.txt Remote Password Disclosur scrip : http://www.scriptsez.net/download/download.php?action=download&p=randomphpquote.zip&ns=1 discovered by : ThE TiGeR 100 Exploit : http://www.site.com/path/pwd.txt or http://www.site.com/pwd.txt then crack the password with bass64 decod...

CVE-2006-6237

SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...

ASPPortal-400.txt

Perl Script Decode: !/usr/bin/perl AspPortal Password Decrypter Get pass exploit.asp and this copy this window Speical Thanks To::: Nukedx ,For ASPPORTAL Decrypter ajann if@1 = 1 exploit; sub decrypt $lp = length$appass; $apkey =...

Directory Traversal vulnerability in IPCheck Monitor Server

Directory Traversal vulnerability in IPCheck Monitor Server -------------------------------------- Overview A directory traversal vulnerability has been identified in IPCheck Server Monitor Free/Trial/Professional, which may be exploited by potential attackers to retrieve files from the underlyin...

CVE-2006-3791

The decodestringmap function in servertransport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service daemon termination via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory...

CVE-2006-3561

BT Voyager 2091 Wireless firmware 2.21.05.08mA2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via 1 /btvoyagergetconfig.sh, PPP credentials via 2 btvoyagergetpppcreds.sh...

[SA19383] PHP "html_entity_decode()" Information Disclosure Vulnerability

TITLE: PHP "htmlentitydecode" Information Disclosure Vulnerability SECUNIA ADVISORY ID: SA19383 VERIFY ADVISORY: http://secunia.com/advisories/19383/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP 4.3.x http://secunia.com/product/922/ PHP 4.4.x...

phpRPC decode function command execution

Added: 03/13/2006 CVE: CVE-2006-1032 BID: 16833 OSVDB: 23514 Background phpRPC is an xmlrpc library written in PHP supporting most databases. Problem A vulnerability in the decode function allows a remote attacker to execute arbitrary PHP commands placed inside a tag. Resolution phpRPC is no long...