PT-2011-1049 · Muscle +2 · Pcsc-Lite +2

Name of the Vulnerable Software and Affected Versions: pcsc-lite versions 1.5.3 through 1.6.6 pcsc-lite versions prior to 1.6.6 Description: The issue affects the pcsc-lite package, potentially leading to breaches of confidentiality, integrity, and availability of protected information. It can be...

Microsoft IIS/PWS - CGI Filename Double Decode Command Execution (MS01-026) (Metasploit)

$Id: ms01026dbldecode.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Virtual Store Open 3.0 Acess SQL Injection

Exploit for asp platform in category web applications !/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug:...

Virtual Store Open 3.0 - Acess SQL Injection

!/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection Found: Br0ly google dork:...

php: XSS mitigation bypass via utf8_decode()

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...

php: NULL pointer dereference in XML-RPC extension

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

Pidgin Libpurple 'purple_base64_decode()' DoS Vulnerabilities - Windows

Pidgin is prone to denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RoSPORA 1.5.0 - Remote PHP Code Injection

'; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter passed through $GET's' isn't properly...

MS10-070 ASP.NET Padding Oracle File Download

!/usr/bin/ruby -w aspxpochotextattack.rb Copyright c 2010 AmpliaSECURITY. All rights reserved http://www.ampliasecurity.com Agustin Azubel - [email protected] MS10-070 ASPX proof of concept Decrypt data using Vaudenay's cbc-padding-oracle-side-channel Encrypt data using Rizzo-Duong CBC-R...

PT-2010-5007 · Freeradius · Freeradius

Name of the Vulnerable Software and Affected Versions: FreeRADIUS version 2.1.9 Description: The issue is related to the fr dhcp decode function in lib/dhcp.c, which does not properly handle the DHCP Relay Agent Information option in certain non-default builds. This can be exploited by remote...

kernel: nfsd4: bug in read_buf

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service panic or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the readbuf and...

DEBIAN-CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

PHP168 V6 download any file vulnerability-vulnerability warning-the black bar safety net

漏洞 文件 download.php Vulnerability related to the file HASH b912249a22b630c04f7ad65f8ba5a2f6 download.php $url=base64decode$url; //2 line 7 $fileurl=strreplace$webdbwwwurl,"",$url; if eregi". php$",$fileurl && isfilePHP168PATH."$ fileurl" //determine the file drop out is not php, if it is php, and...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Cybershade CMS 0.2b Session Hijacking PoC Vulnerability

Exploit for unknown platform in category web applications ======================================================= Cybershade CMS 0.2b Session Hijacking PoC Vulnerability ======================================================= p0c!: Session Hijacking Cybershade CMS 0.2b Session Hijacking PoC...

To bypass the <? PHP exit('Access Denied'); ?> Limit-vulnerability warning-the black bar safety net

To bypass ? PHP exit’Access Denied’; ?& gt; limit ? php $shellcode=’PD9waHBpbmZvKCk7Pz4’;// base64decode ? phpinfo;?& gt; $endstr=’s’; $timestamp=$endstr.$ shellcode; fileputcontents"php://filter/write=convert.base64-decode/resource=ryat.php","? PHP exit’Access Denied’; ?& gt;\t$timestamp"; ?& gt...

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

Exploit for unknown platform in category local exploits ======================================================== MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows ======================================================== Title: MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows CVE-ID:...

phpcms2008 latest 0day & Exp-vulnerability warning-the black bar safety net

Source:My5t3ry The vulnerability exists in the yp/job. php 1 7-3 4 line, the urldecode function to blame, the code is as follows: | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 | switch$action case 'list': $catid = intval$catid; $head'keywords' .= 'List positions'; $head'title' .= 'Job...

DEBIAN-CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...

ntop 3.3.10 Denial Of Service

Title: ntop = sizeoftheHttpUser usersizeoftheHttpUser-1 = '\0'; . . . Affected Operating Systems: Only tested on Linux Affected Versions: ntop = 3.3.10 CVE: CVE-2009-2732 Credit: Brad Antoniewicz [email protected] code: START modules/auxiliary/dos/http/ntopbasic.rb...