BlazeDVD 6.0 - (.plf) SEH universale Buffer Overflow

No description provided by source. Exploit Title : BlazeDVD v6 .plf SEH universale Buffer Overflow tested on windows xp SP 3 FR Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : my $file= MadjiX.plf; my $junk=\x41 x 608; my $nseh=\xeb\x06\x90\x90; my $seh= pack'V',0x100157F...

Wordpress Font Uploader Plugin 1.2.4 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date : 01-06-2012 Google Dork :...

Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (3)

No description provided by source. !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the...

PSOProxy 0.91 Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9706/info It has been reported that PSOProxy is prone to a remote buffer overflow vulnerability. The issue is due to the insufficient boundary checking. A malicious user may exploit this condition to potentially corrupt...

Fedora 19 : php-5.5.7-1.fc19 (2013-23208)

12 Dec 2013, PHP 5.5.7 CLI server : - Added some MIME types to the CLI web server Chris Jones - Implemented FR 65917 getallheaders is not supported by the built-in web server - also implements apacheresponseheaders Andrea Faulds Core : - Fixed bug 66094 unregistertickfunction tries to cast a...

Updated file-roller package fixes CVE-2013-4668

Updated file-roller package fixes security vulnerability: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4 when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, relat...

PayPal Cross Site Scripting

====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ \ /|| ||/ // || || / / || ======================================================================= Hello I...

Zimplit CMS 3.0 - Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53990/info Zimplit CMS is prone to multiple local file-include vulnerabilities and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context...

AlegroCart FredCK-Editor (ASPELL for WinSRV) Remote Command Exec

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

sos security, bug fix, and enhancement update

1.7-9.62.0.1.el5 - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile 1.7-9.62 - Always log plugin exceptions that are not raised to the interpreter Resolves: bz717480 - Ensure relative...

Unfixed XSS vulnerability at www.n9.fr

Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.n9.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

Unfixed XSS vulnerability at www.math.u-bordeaux1.fr

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.math.u-bordeaux1.fr, which at the time of submission ranked 72689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

Unfixed XSS vulnerability at w3.u-grenoble3.fr

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting w3.u-grenoble3.fr, which at the time of submission ranked 293797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

One million pages infected by Lilupophilupop SQL injection

One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...

Unfixed XSS vulnerability at recherche.europe1.fr

Security researcher Atmon3r, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting recherche.europe1.fr, which at the time of submission ranked 4416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Unfixed XSS vulnerability at www.rtl2.fr

Security researcher Atmon3r, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting www.rtl2.fr, which at the time of submission ranked 93438 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...

URL Shortener Script 1.0 SQL Injection

=================================================================================== url shortener script 1.0 sql injection Vulnerabilities =================================================================================== Exploit Title: url shortener script 1.0 sql injection Vulnerabilities...

OpenCart 1.5.1.2 Blind SQL Injection

==================================================== OpenCart v1.5.1.2 = Blind SQL Vulnerability ==================================================== Exploit Title: OpenCart v1.5.1.2 / Blind SQL Vulnerability Date: 08 - 09 - 2011 Author: Rires Walid Software Link: http://www.opencart.com Contact ...

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...