Apple Safari 3.2.3 (Windows x86) - JavaScript 'eval' Remote Denial of Service

!/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript 'eval' Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Safari crashes when interpreting a webpage that calls the "eval" JavaScript function with "A/"...

CVE-2008-2304

Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a .funhouse file with a string XML element that contains many characters...

CVE-2008-2304

CVE-2008-2304 describes a buffer overflow in Apple Core Image Fun House (2.0 and earlier) within CoreImage Examples in Xcode tools before 3.1. The flaw arises when processing a .funhouse file with XML data: code path draws a point label and at one point copies a C string without length bound (str...

CVE-2008-2304

Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a .funhouse file with a string XML element that contains many characters...

Apple Core Image Fun House buffer overflow

Buffer overflow on .funhouse files parsing...

[NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary - ---------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-2007062...

Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)

No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...

Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)

Exploit for macOS platform in category dos / poc ============================================================== Core Image Fun House , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0: CFPropertyListCreateFromXMLData: plist parse failed; the data is notproper UTF-8. The file...

Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)

Core Image Fun House 2.0 OSX - Arbitrary Code Execution PoC !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10...

Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)

!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...

Netragard Security Advisory 2007-06-28

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary - ---------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-2007062...

CVE-2007-4955

The CVE-2007-4955 entry describes a PHP remote file inclusion vulnerability in the Joomla! Flash Fun! extension (com_joomlaflashfun) version 1.0. The issue allows an attacker to remotely execute arbitrary PHP code by supplying a URL in the mosConfig_live_site parameter within admin.joomlaflashfun...

CVE-2007-4955

PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! comjoomlaflashfun 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

joomlaflash-rfi.txt

Joomla Flash Fun! Component RFI Bug in : /administrator/components/comjoomlaflashfun/admin.joomlaflashfun.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: "comjoomlaflashfun" Example:...

Joomla Component Flash Fun! 1.0 Remote File Inclusion Vulnerability

No description provided by source. Joomla Flash Fun! Component RFI Bug in : /administrator/components/comjoomlaflashfun/admin.joomlaflashfun.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: "comjoomlaflashfun" Example:...

Joomla Component Flash Fun! 1.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component Flash Fun! 1.0 Remote File Inclusion Vulnerability =================================================================== Joomla Flash Fun! Component RFI Bug...

Joomla! Component flash fun! 1.0 - Remote File Inclusion

Joomla Flash Fun! Component RFI Bug in : /administrator/components/comjoomlaflashfun/admin.joomlaflashfun.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: "comjoomlaflashfun" Example:...

Design/Logic Flaw

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

CVE-2007-3192

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

Sql injection

Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System JFFNMS 0.8.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass parameters...