Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

VUPlayer <= 2.49 .PLS Universal Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl VUPlayer = 2.49 .PLS Universal Buffer Overflow Exploit ------------------------------------------------------- Discovered & Exploit by SkD [email protected] & [email protected] ------------------------------------------------------- This is a pret...

VUPlayer 2.49 - .pls Universal Buffer Overflow

VUPlayer 2.49 - .pls Universal Buffer Overflow !/usr/bin/perl VUPlayer = 2.49 .PLS Universal Buffer Overflow Exploit ------------------------------------------------------- Discovered & Exploit by SkD skdrat at hotmail.com & skd at abysssec.com...

Secure Downloads 2.0.0r SQL Injection

vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...

Directory traversal

Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

[NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting

Application: Quick.Cms.Lite v2.1 Freeware Authors Site: http://opensolution.org/quick.cms,en,10.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"scriptalertdocument.cookie/script"...

Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07)

At least the freeware version of Softwin's anti-virus solution BitDefender Free Edition http://www.bitdefender.com/site/view/Download-Free-Products.html http://download.bitdefender.com/windows/free/winfree/en/bitdefenderfreev10.exe ships with a completely outdated zlib 1.1.3 http://www.zlib.net/...

VUPlayer malformed playlist buffer overflow

Overview VUPlayer fails to properly handle malformed playlists. This vulnerability may allow a remote attacker to execute arbitrary code. Description VUPlayer is a freeware audio player for the Microsoft Windows platform. It can play various types of media files, such as MP3s. A Playlist .PLS or...

3proxy 0.5.3g (Windows x86) - 'proxy.c logurl()' Remote Buffer Overflow

/ 3proxyv0.5.3g: win32 service remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy-win32.c -o x3proxy-win32 syntax: ./x3proxy-win32 -pr -h host sumus homepage/url: http://3proxy.ru/ 3Proxy tiny free proxy server previously known as 3APA3A tiny...

CVE-2006-6987

Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-6987

Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-6987

The CVE-2006-6987 entry describes a cross-domain information disclosure in FineBrowser Freeware 3.2.2 via an object tag using a data parameter that points to a page on the attacker’s site, which specifies a Location header referencing the target site and makes content available through the object...

TimberWolf 1.2.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: WindowsLinuxUnix -=+ Bug typ...

[Full-disclosure] TimberWolf 1.2.2 vulnerable to XSS

-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=----------------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: WindowsLinuxUnix -=+ Bu...

Block MSN Messenger Live 8

Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...

CVE-2006-5534

Multiple cross-site scripting XSS vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 Kat, 3 id, or 4 no parameters. NOTE: some of these details are obtained from third party...

CVE-2006-5534

CVE-2006-5534 affects Zwahlen Online Shop Freeware, likely up to version 5.2.2.50, with multiple XSS flaws in index.htm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via parameters (cat, Kat, id, or no parameters). The root cause is unvalidated input in index.h...

Zwahlens Online Shop 5.2.2 - Cat Cross-Site Scripting

Zwahlens Online Shop 5.2.2 - Cat Cross-Site Scripting source: https://www.securityfocus.com/bid/20682/info Zwahlen's Online Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

ArtmedicEvent.txt

Original Advisory : http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html Artmedic Event Remote File Include Vulnerability Website : http://www.artmedic.de/ Script : Artmedic Event Script Risk : High Class : Remote Greetz : B3g0k,Nistiman,Flot,Netqurd etc.. d0rk :...

NetworkActiv Web Server Crafted Filename Request Script Source Disclosure

The remote host is running NetworkActiv Web Server, a freeware web server for Windows. According to its banner, the installed version of NetworkActiv Web Server does not properly validate the extension of filenames before deciding how to serve them. By including a forward-slash character, a remot...