1036 matches found
TGS CMS 0.x SQL Injection / XSS / Disclosure
| | | / | | / | | | \ / | | | / / | |/ \ / / |/ | |/| | | ' \ / | / / | | alertdocument.cookie The Risk: By exploiting this vulnerability, an attacker can inject malicious code in the script and can stole cookies. Fix the vulnerability: Encode output...
kernel: nfsv4 client can be crashed by stating a long filename
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service OOPS via a long filename, related to the encodelookup function...
kernel: nfsv4 client can be crashed by stating a long filename
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service OOPS via a long filename, related to the encodelookup function...
The i18n in velocity templates does not auto html encode parameters
All the getText methods on com.atlassian.confluence.util.i18n.DefaultI18NBean are anontated as HtmlSafe which means that any parameter which gets passed in as an argument will not be auto html encoded by the Anti-XSS module. The most straight forward way to fix this is to wrap the parameter insid...
ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)
No description provided by source. ?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigge...
Merak Media Player 3.2 - .m3u File Local Buffer Overflow (SEH)
Merak Media Player 3.2 - .m3u File Local Buffer Overflow SEH exploit.py Merak Media Player 3.2 Buffer Overflow ExploitSEH By:Encrypt3d.M!nd m1nd3d.wordpress.com Orginal Advisory: http://www.milw0rm.com/exploits/7857 Nothing Intersting in this exploit,too easy just improving my SEH exploitation...
Fedora Update for flac FEDORA-2007-730
Check for the Version of flac OpenVAS Vulnerability Test Fedora Update for flac FEDORA-2007-730 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
TYPO3 < 4.0.12/4.1.10/4.2.6 (jumpUrl) Remote File Disclosure Exploit
No description provided by source. !/usr/bin/env python ------------------------------------------------------------------------------ TYPO3-SA-2009-002 exploit by Lolek of TK53 [email protected] date: 2009/02/10 vendor url: http://typo3.org vulnerable versions: TYPO3 4.2.6, TYPO3 4.1.10, TYPO3...
Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (1)
Destiny Media Player 1.61 lst File Local Buffer overflow Exploit By:Encrypt3d.M!nd i was so stupid when i wrote the poc coz i didn't realize somethings :p well this is workin exploit tested on windows xp sp3 don't double click the file,import it from the program Greetz:-=Mizo=-thnx dude :X,L!0N,E...
Linux/x86 - shift-bit execve() Encoder Shellcode (114 bytes)
Linux/x86 - shift-bit execve Encoder Shellcode 114 bytes. Shellcode exploit for Linuxx86 platform ;author: Shihao [email protected] ;decoding will be divided into two parts ;First, shift right to get the original shellcode with prefix "0xAA" ;Second, delete all the "0xAA" prefix and reformat...
cainabel-overflow.txt
exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file Buffer overflow Exploit" print "By:Encrypt3d.M!nd" print "encrypt3d.blogspot.com" print "" print "Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends" print "This is exploit for my PoC" print "Tested...
X10media Mp3 Search Engine <= 1.6 Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== X10media Mp3 Search Engine How to use : http://127.0.0.1/encode.php?t=Url Ex : http://127.0.0.1/encode.php?t=includes/constants.php Exploit...
CVE-2008-4166
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service application crash by attempting to URL encode a string containing many instances of an invalid character...
CVE-2008-4166
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service application crash by attempting to URL encode a string containing many instances of an invalid character...
Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)
!/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO necessary authentication, which will...
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow / Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date :...
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
123tkShop 0.9.1 - Remote Authentication Bypass
123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 - Remote Authentication Bypass
By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 Remote Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ========================================================== 123tkShop 0.9.1 Remote Authentication Bypass Vulnerability ========================================================== By Michael Brooks Vulnerability:Sql Injection Software:123tkSh...