CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

PunBB 1.3 Cross Site Scripting

oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...

Cback V3 Forum Cross Site Scripting

oo Cback v3 forum oo Download: http://www.cback.de/downloads.php Price 79 Eur oo Vendor: www.cback.de oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/viewtopic.php?t=Xss oo Demo:...

Linux Kernel 'print_fatal_signal()'本地信息泄漏漏洞

Bugraq ID: 37724 Linux是一款开放源代码的操作系统。 当print-fatal-signals启用时，通过简单的跳到用户空间的地址可Dump出任意内核可访问的内存。 或如果部分硬件在读的过程中可导致系统崩溃。 重要信号处理器会在执行地址Dump出16个字节，此地址完全可由ring 3级别用户控制。 另外，当跳到没有映射的地址时，将触发多大16个额外的无用页面错误，导致系统变慢或效率不高 此选项默认在系统中关闭，并且只存在在i386系统上。 Linux kernel 2.6.32 Linux kernel 2.6.31 5 Linux kernel 2.6.31 .2...

Joomla 1.5.x Local File Inclusion

Joomla 1.5.x + Download: http://www.joomla.org/download.html + Bug: Local File inclusion in index.php file + Author: s4r4d0 + Mail: [email protected] + Team: Fatal Error + Poc: http://www.site.com/index.php?option=/../../../../../../../../../../../../etc/passwd%00 + Demo:...

cms -db <= v0.7.13 Multiple Vulnerabilities

No description provided by source. Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db = v0.7.13 CSRF -Add super-user: POST URL: /cms/admin/newuser.php PARAMS: POST...

Unfixed XSS vulnerability at www.alvorada.pt

Security researcher Fatal Attack, has submitted on 20/12/2009 a cross-site-scripting XSS vulnerability affecting www.alvorada.pt, which at the time of submission ranked 6092284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

XOOPS 2.0.x Content 0.5 SQL Injection

+Xoops 2.0.x Module Content +Donwload of Module:http://prdownloads.sourceforge.net/xoops/XOOPS2modcontent-0.5.zip?download +Author: s4r4d0 +mail:[email protected] +TEAM: Fatal Error +Bug: Sql injection has been found in index.php...

Endonesia 8.4 CMS Local File Inclusion

Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error Poc:http://www.site.com/mod.php?mod=/../../../../../../proc/self/environ%00...

Endonessia CMS 8.4 Loccal File Inclusion

No description provided by source. Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Endonesia CMS 8.4 local file inclusion

No description provided by source. Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

eNdonesia CMS 8.4 - Local File Inclusion

Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error Poc:http://www.site.com/mod.php?mod=/../../../../../../proc/self/environ%00...

eNdonesia CMS 8.4 - Local File Inclusion

eNdonesia CMS 8.4 - Local File Inclusion Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Endonessia CMS 8.4 Loccal File Inclusion

Exploit for unknown platform in category web applications ======================================= Endonessia CMS 8.4 Local File Inclusion ======================================= Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatalerror page and unspecified other components...

Foxit Reader JPEG2000 / JBIG Decoder Add-On < 2.0.2009.616 Multiple Vulnerabilities

The Foxit Reader application installed on the remote Windows host includes an optional JPEG2000 / JBIG Decoder add-on that is prior to version 2.0.2009.616. It is, therefore affected by multiple vulnerabilities : - A out-of-bounds read error exists in the add-on due to improper handling of a...

kernel security and bug fix update

2.6.9-78.0.22.0.1.EL - xen fix for hung JVM thread after GPF orabug 7916406 Chuck Anderson - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mt...

Konqueror 4.1 XSS / Remote Crash Vulnerabilities

Exploit for multiple platform in category dos / poc ================================================ Konqueror 4.1 XSS / Remote Crash Vulnerabilities ================================================ +-----------------------------------------------------+ | Konqueror 4.1 XSS / Remote Crash...

Konqueror 4.1 XSS / Remote Crash Vulnerabilities

No description provided by source. +-----------------------------------------------------+ | Konqueror 4.1 XSS / Remote Crash Vulnerabilities | +-----------------------------------------------------+ | by athos - stakerathotmaildotit | | http://konqueror.kde.org |...