Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join...

Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)

Multiple PDF Readers - JBIG2 Local Buffer Overflow PoC causes an exception at 41414141 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/8090.pdf 2009-41414141.pdf milw0rm.com 2009-02-23...

Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)

causes an exception at 41414141 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8090.pdf 2009-41414141.pdf milw0rm.com 2009-02-23...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Novell Netware 6.5 - 'ICEbrowser' Remote System Denial of Service

!/usr/bin/perl novellnwibsysdos.pl Novell Netware 6.5 ICEbrowser Remote System Denial of Service Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com "Mozilla/5.0 NetWare; U; NetWare 6.50.06; en-US ICEbrowser/6.1.2 NovellViewPort/3.7.2" After target views exploit page, the browser wil...

Forgot Password/Crowd Integration exception handling and regex improvements

If JIRA is integrated with Crowd, and Crowd has password restrictions e.g. regex, a user will receive a stack trace in JIRA if the new password does not meet Crowd's password requirements e.g. through the Forgot Password link in JIRA. noformat java.lang.IllegalArgumentException: Could not change...

Forgot Password/Crowd Integration exception handling and regex improvements

If JIRA is integrated with Crowd, and Crowd has password restrictions e.g. regex, a user will receive a stack trace in JIRA if the new password does not meet Crowd's password requirements e.g. through the Forgot Password link in JIRA. noformat java.lang.IllegalArgumentException: Could not change...

Cross site scripting

Cross-site scripting XSS vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions...

PGP Desktop 9.0.6 - 'PGPwded.sys' Local Denial of Service

--------------------------PGP Desktop 9.0.6 Denial Of Service--------------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Profile: http://evilcry.netsons.org Website: http://evilfingers.com/ Release Date: 23/12/2008 +-------------------------------------------------+ Product...

DEBIAN-CVE-2008-5688

MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...

CVE-2008-5688

MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...

CVE-2008-5688

MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...

oovoo-overflow.txt

CMP ECX,EAX-0C ---------------------------------------------------------------- 04:22:12.015 pid=0E10 tid=0C08 EXCEPTION first-chanc...

CVE-2008-4684

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...

Double free

Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled...

NoticeWare E-mail Server 5.1.2.2 (POP3) Pre-Auth DoS Exploit

No description provided by source. !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754atgmaildotcom Description: NoticeWare E-mail Server has many odd querks about it...

CVE-2008-4279

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated...

Design/Logic Flaw

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated...