PT-2011-1451

Name of the Vulnerable Software and Affected Versions SGX-SP Final versions prior to 11.00 SGX-SP Final NE versions prior to 11.00 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting XSS...

CVE-2010-3926: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install'...

Month Of Abysssec Undisclosed Bugs - Microsoft Unicode Scripts Processor

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...

Microsoft Unicode Scripts Processor Remote Code Execution

Exploit for windows platform in category dos / poc ========================================================= Microsoft Unicode Scripts Processor Remote Code Execution ========================================================= Title : Microsoft Unicode Scripts Processor Remote Code Execution Versio...

Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)

Microsoft Unicode Scripts Processor - Remote Code Execution MS10-063 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version :...

Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...

Dedecms <= V5.6 Final模板执行漏洞

Dedecms V5.6 Final版本中的各个文件存在一系列问题，经过精心构造的含有恶意代表的模板内容可以通过用户后台的上传附件的功能上传上去，然后通过SQL注入修改附加表的模板路径为我们上传的模板路径，模板解析类：include/incarchivesview.php没有对模板路径及名称做任何限制，则可以成功执行恶意代码。 1、member/articleedit.php文件（注入）： //漏洞在member文件夹下普遍存在，$dedeaddonfields是由用户提交的，可以被伪造，伪造成功即可带入sql语句，于是我们可以给附加表的内容进行update赋值。 … //分析处理附加表...

CVE-2009-4964

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file...

CVE-2009-4964

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file...

CVE-2009-4964

CVE-2009-4964 describes a stack-based buffer overflow in KSP 2006 FINAL that allows remote code execution via a long string in a .M3U playlist file. The vulnerability is triggered by crafted playlist data, with a CVSS v2 base score of 9.3 (HIGH) indicating NETWORK attack vector, no authentication...

CVE-2009-4964: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file...

Live Help 2.6.0 Final Cross Site Scripting

======================================================================================== | Title : Live Help 2.6.0 Final Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

CVE-2009-4252

CVE-2009-4252 is an XSS vulnerability in the Clixint DPI Image Hosting Script DPI 1.1 Final (1.1F). The issue affects images.php and allows remote attackers to inject arbitrary web script or HTML via the date parameter. Several connected sources corroborate this: OpenVAS NASL entries describe a p...

DPI 1.1-final Powered by Clixint XSS

Exploit for unknown platform in category web applications ==================================== DPI 1.1-final Powered by Clixint XSS ==================================== Example1: http://server/path/images.php?date=%3Cscript%3Ealert123456%3C/script%3E Example2:...

CVE-2009-3963

XOOPS (before version 2.4.0 Final) is cited in connected sources as having a cross-site scripting vulnerability in misc.php: the script does not sanitize the requested URI before displaying it, enabling a remote attacker to craft a URL that executes script in victims’ browsers. CVE-2009-3963 is t...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

KSP 2006 FINAL ( .M3U) Universal Local Buffer Exploit (SEH)

Exploit for unknown platform in category local exploits =========================================================== KSP 2006 FINAL .M3U Universal Local Buffer Exploit SEH =========================================================== !/usr/bin/perl by hack4love KSP 2006 FINAL .M3U Universal Local...

KSP 2006 FINAL - '.m3u' Universal Local Buffer (SEH)

!/usr/bin/perl by hack4love [email protected] KSP 2006 FINAL .M3U Universal Local Buffer Exploit SEH http://download.cnet.com/KSP/3000-21394-10540099.html?tag=mncol easy this work sooooooooo good USEKSPPLAYLISTLOADHACK4LOVE.M3U BOOM CALC INFO::WE HAVE ONLEY 192 BIT FOR shellcode SO I USE...