BlazeDVD 6.0 - .plf File Universal Buffer Overflow (SEH)

BlazeDVD 6.0 - .plf File Universal Buffer Overflow SEH Exploit Title : BlazeDVD v6 .plf SEH universale Buffer Overflow tested on windows xp SP 3 FR Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : my $file= "MadjiX.plf"; my $junk="\x41" x 608; my $nseh="\xeb\x06\x90\x90"; ...

Design/Logic Flaw

Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location information via unspecified vectors...

MoreAmp - .maf Local Stack Buffer Overflow (SEH)

MoreAmp - .maf Local Stack Buffer Overflow SEH Exploit Title : MoreAmp .maf local Stack Buffer Overflow SEH tested on windows xp SP 3 FR Author: MadjiX Special Greets:His0k4 where are you : Greets:Bibi-info , Silectovic , Volc4n0 my $file= "MadjiX.maf"; my $junk = "\x41" x 108 ; my $nseh =...

Havij 1.10 Cross Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Software Link: http://itsecteam.com/files/Havij%201.10.rar Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By :...

VU Web Visitor Analyst - Authentication Bypass

VU Web Visitor Analyst - Authentication Bypass 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

Real Estate Brokers SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== Real Estate Brokers SQL Injection Vulnerability =============================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Site for Real Estate - Brokers SQL...

PT-2010-3129 · Python +1 · Python +1

Name of the Vulnerable Software and Affected Versions: Python version 2.5 Description: The issue is related to an integer overflow in the rgbimgmodule.c file within the rgbimg module. This can be triggered by a large image, potentially leading to a buffer overflow. The problem exists due to an...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

kernel: ipv6: skb is unexpectedly freed

Use-after-free vulnerability in net/ipv4/tcpinput.c in the Linux kernel 2.6 before 2.6.20, when IPV6RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service kernel panic via a SYN packet while the socket is in a listening TCPLISTEN state, which is not properl...

Lexmark Printer Detection

The remote host is a Lexmark printer. By querying the device information page, this plugin attempts to identify the model, and various other key software versions such as kernel, engine, base installed on the remote Lexmark device. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2010-1736

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/Krmdb.mdb...

TR Forum 1.5 - Multiple Vulnerabilities

TR Forum 1.5 - Multiple Vulnerabilities ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2...

kernel: ipv6: skb is unexpectedly freed

Use-after-free vulnerability in net/ipv4/tcpinput.c in the Linux kernel 2.6 before 2.6.20, when IPV6RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service kernel panic via a SYN packet while the socket is in a listening TCPLISTEN state, which is not properl...

Oracle RDBMS Host Name and Patch Info

Binary data oraclerdbmsquerypatchinfo.nbin...

Ektron CMS400.NET 7.5.2 - Multiple Vulnerabilities

Ektron CMS400.NET 7.5.2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/39679/info Ektron CMS400.NET is prone to multiple security vulnerabilities, including multiple cross-site scripting issues, an information-disclosure issue, a cookie-manipulation issue, a...

Cuando esté creando una cuenta

Cuando cree una cuenta en Facebook, sea cuidadoso con la información personal que ofrece durante el proceso de registro. Facebook sólo necesita un nombre y un cumpleaños falso. NO use la misma contraseña que utiliza para su correo electrónico u otras cuentas en línea de naturaleza delicada. Si su...

School Management System Pro 6.0.0 Backup Disclosure

======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Web Site :...

School Management System Pro 6.0.0 Backup Dump Vulnerability

Exploit for asp platform in category web applications ============================================================ School Management System Pro 6.0.0 Backup Dump Vulnerability ============================================================...

Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net

Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...