Rumba FTP客户端FTPSFtp.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 40309 Rumba FTP是一款图形化的FTP客户端。 Rumba FTP客户端所安装的FTPSFtp.dll ActiveX控件没有正确地过滤提交给OpenSession方式的字符串参数，用户受骗访问了恶意网页并向该方式传送了超长参数就可以触发缓冲区溢出，导致执行任意指令。 NetManage Rumba FTP 4.2 临时解决方法： 为clsid 677A6F83-52A0-4931-8E62-EC713EE9B949设置kill bit。 厂商补丁： NetManage --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下...

PHP Graphy <= 0.9.7 (index.php) Remote Command Execution Vulnerability

Exploit for php platform in category web applications ====================================================================== PHP Graphy = 0.9.7 index.php Remote Command Execution Vulnerability ======================================================================...

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession() Buffer Overflow

Exploit for windows platform in category local exploits =================================================================== Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow =================================================================== Rumba FTP Client FTPSFtp.dll v4.2.0.0...

Spaw Editor 1.0 / 2.0 Remote Shell Upload

Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software ..........: http://www.spaweditor.com Sptnx...

Rumba FTP Client 'FTPSFtp.dll' 4.2.0.0 - 'OpenSession()' Local Buffer Overflow

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow Vulnerable version download: http://download.cnet.com/Rumba-FTP/3000-21604-10587778.html Found and coded by sinn3r Greets: Corelan Security Team &...

Joomla Horses SQL Injection

Title : Joomla Component comhorses SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-19 !! + Title : Joomla Component comhorses SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage : http://www.KernelSec.com + Email :...

Joomla Table SQL Injection

Title : Joomla Component comtable SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-19 !! + Title : Joomla Component comtable SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage : http://www.KernelSec.com + Email :...

Spaw Editor 1.02.0 - Arbitrary File Upload

Spaw Editor 1.02.0 - Arbitrary File Upload Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software...

Spaw Editor 1.0/2.0 - Arbitrary File Upload

Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software ..........: http://www.spaweditor.com Sptnx...

Spaw Editor v1.0 & 2.0 Remote File Upload

Exploit for asp platform in category web applications ========================================= Spaw Editor v1.0 & 2.0 Remote File Upload ========================================= Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software...

Joomla! Component com_packages - SQL Injection

Joomla! Component compackages - SQL Injection + Title : Joomla Component compackages SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-19 !! + Title : Joomla Component compackages SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage ...

QtWeb Browser 3.3 - Denial of Service

QtWeb Browser 3.3 - Denial of Service Title: QtWeb Browser version 3.3 Dos based in Xss Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.3 Tested on: Windows Author: PoisonCode Published: 2010-05-17 CVE-ID: | \ / | | | |...

QtWeb Browser 3.3 - Denial of Service

Title: QtWeb Browser version 3.3 Dos based in Xss Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.3 Tested on: Windows Author: PoisonCode Published: 2010-05-17 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | ...

Joomla Camp SQL Injection

Title : Joomla Component comcamp SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-15 !! + Title : Joomla Component comcamp SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage : http://www.KernelSec.com + Email : [email protected]...

LinPHA 1.3.2 - rotate.php Remote Command Execution

LinPHA 1.3.2 - rotate.php Remote Command Execution /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ //...

Joomla! Component com_camp - SQL Injection

Joomla! Component comcamp - SQL Injection + Title : Joomla Component comcamp SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-15 !! + Title : Joomla Component comcamp SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage :...

Joomla! Component com_camp - SQL Injection

Title : Joomla Component comcamp SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-15 !! + Title : Joomla Component comcamp SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage : http://www.KernelSec.com + Email : [email protected]...

Fast Free Media 1.3 Adult Site Shell Upload

======================================================================================== | Title : Fast Free Media V 1.3 Adult Site Upload Shell Exploiot | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by FastFreeMedia.com All Videos Copyright ©...

Uploader 0.1.5 Cross Site Request Forgery / Shell Upload

======================================================================================== | Title : Uploader 0.1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Uploader 0.1.5 | Tested on: windows SP2 Français V.Pnx2 2.0...

Digital College 1.0 - Arbitrary File Upload

Digital College 1.0 - Arbitrary File Upload ======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 |...