Easy Icon Maker - .ico File Reading Crash

Easy Icon Maker - .ico File Reading Crash ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX...

Discuz! 7.0-7.2 the background settings. inc. php to write shell vulnerability-vulnerability warning-the black bar safety net

Impact version Discuz! 7.0-7.2 Vulnerability details: if$operation == 'uc' && iswriteable'./ config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost',...

Interspire Knowledgebase Manager 5.1.3 Cross Site Scripting / SQL Injection

!/bin/sh - Interspire Knowledge Manager - ====================================================================== Table of Contents Affected Software....................................................1 Severity.............................................................2 Vendor's Description of...

mysql provide the right error message [mysql] ERROR 1-bug-warning-the black bar safety net

If the ROOT mention the right to encountered in the process mysql ERROR 1: Can't create/write to file The reasons are the following 1, folder permissions is not enough,you want to give the USERS group read and write permissions; 2, folder, disk full,file write not to go in;empty folder 3, your...

Joomla OzioGallery2 Arbitrary File Write

Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational purposes only. The authors will not...

Joomla component com_oziogallery2 / IMAGIN arbitrary file write

No description provided by source. Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational...

Joomla! Component com_oziogallery2 / IMAGIN - Arbitrary File Write

Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational purposes only. The authors will not...

Joomla! Component com_oziogallery2 IMAGIN - Arbitrary File Write

Joomla! Component comoziogallery2 IMAGIN - Arbitrary File Write Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is...

Mini-stream Ripper (Windows XP SP2SP3) - Local Overflow

Mini-stream Ripper Windows XP SP2SP3 - Local Overflow !/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP...

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

DEBIAN-CVE-2009-4023

Argument injection vulnerability in the sendmail implementation of the Mail::Send method Mail/sendmail.php in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111...

PHP 5.3.0 - pdflib Arbitrary File Write

PHP 5.3.0 - pdflib Arbitrary File Write Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew;...

PHP 5.3.0 - 'pdflib' Arbitrary File Write

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew; pdfopenfile$IRCRASH,$PATH;...

PHP 5.3.0 pdflib Arbitrary File Write

Exploit for unknown platform in category local exploits ===================================== PHP 5.3.0 pdflib Arbitrary File Write ===================================== Title: PHP 5.3.0 pdflib Arbitrary File Write CVE-ID: OSVDB-ID: Author: Sina Yazdanmehr Published: 2009-11-06 Verified: yes view...

PHP 5.3.0 pdflib Arbitrary File Write

No description provided by source. Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension requir...

T-HTB Manager 0.5 - Multiple Blind SQL Injections

Salvatore "drosophila" Fresta + Application: T-HTB Manager + Version: 0.5 + Website: http://sourceforge.net/apps/mediawiki/t-htbmanager/index.php?title=MainPage + Bugs: A Multiple Blind SQL Injection + Exploitation: Remote + Date: 10 Sep 2009 + Discovered by: Salvatore Fresta aka drosophila +...

T-HTB Manager 0.5 Multiple Blind SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== T-HTB Manager 0.5 Multiple Blind SQL Injection Vulnerabilities ============================================================== Salvatore "drosophila" Fresta + Application: T-HTB...

All PEAR Mail functions contain an arbitrary file write vulnerability-vulnerability warning-the black bar safety net

出现 问题 的 地方 位于 Sendmail.php ...... if ! isset$from return PEAR::raiseError'No from address given.'; elseif strpos$from, ' ' !== false || strpos$from, ';' !== false || strpos$from, '&' !== false || strpos$from, "' !== false return PEAR::raiseError'From address specified with dangerous characters.';...

McAfee 3.6.0.608 Active-X Data Write

GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID: VULWAR20090616. -----------...

php pear mail package arbitrary file write vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: the PEAR is PHP's official open-source Class Library, PHP Extension and Application Repository abbreviations. PEAR the PHP application development process commonly used in the function written as a class library, the cover page was surface, database access, file...