CVE-2008-3873

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...

Adobe Presenter viewer.swf and loadflash.js XSS Vulnerability

The host is running Adobe Presenter, which prone to to input validation errors which can be exploited by malicious people to conduct cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobepresenterxssvuln900110.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Adobe...

Code injection

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution 955048 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in Microsoft Word. This...

Sun xVM VirtualBox < 1.6.4 Local Privilege Escalation

The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 1.6.4. Such versions reportedly include a kernel driver, 'VBoxDrv.sys', that allows a local user to open the device '.\VBoxDrv' and issue IOCTLs with a buffering method of 'METHODNEITHER'...

homes4sale-xss.txt

Homes 4 Sale Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : Homes 4 Sale Download :...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

itechbids-sqlxss.txt

!R4Q!4N H4CK3R ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php PoC :...

Design/Logic Flaw

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

clamav -- CHM Processing Denial of Service

Hanno Boeck reports: A fuzzing test showed weakness in the chm parser of clamav, which can possibly be exploited. The clamav team has disabled the chm module in older versions though freshclam updates and has released 0.94 with a fixed parser...

OTManager CMS 2.4 - Insecure Cookie Handling

...:::::OTManager CMS v2.4 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best...

Telephone Directory 2008 - Arbitrary Delete Contact

Telephone Directory 2008 - Arbitrary Delete Contact !/usr/bin/perl -w Telephone Directory 2008 see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

Joomla! Component Bible Study 1.5.0 - 'id' SQL Injection

!/usr/bin/perl -w Joomla Component biblestudy Remote SQL Injection Founded & Exploited by : Stack & Jadi Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs : P0c 1:...

Nagios -- Cross Site Scripting Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious people to conduct cross-site scripting attacks...

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

!/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All...

chicomas.2.0.4

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

Site Sift Listings (id) Remote SQL Injection Vulnerability

No description provided by source. powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage" DO...

[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01393763 Version: 1 HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...