CVE-2009-3272

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service application crash via JavaScript code that calls eval on a long string composed of A/ sequences...

Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Exploit and Report (CVE-2009-0927)

Hi everyone, I published some work I did concerning the adobe reader Collab.getIcon buffer overflow. You can find the package exploit/report/payload on: http://www.coromputer.net/CVE-2009-0927package.zip Cheers, Ivan Rodriguez Almuina kralor - HiC && Crpt...

Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling

Arcade Trade Script 1.0b - Authentication Bypass Insecure Cookie Handling ====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder:...

Microsoft Internet Explorer Crash

Irfan Asrar Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1";...

Logoshows BBS 2.0 (DD/ICH) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Logoshows BBS 2.0 DD/ICH Multiple Remote Vulnerabilities ========================================================== Logoshows BBS 2.0 DD vuln:...

MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ====================================================== MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln ====================================================== --------------------------------------------------------------- Message Bo...

MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications =============================================================== MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln ===============================================================...

D-Link CAPTCHA Bypass

D-Link Captcha Partially Broken May 12th, 2009 Hack-A-Day reported on D-Link’s new captcha system designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. I downloaded the new firmware onto our DIR-628 to take a look, and...

MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...

PHP Site Lock 2.0 Insecure Cookie

-------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: --------...

Online Email Manager - Insecure Cookie Handling

Online Email Manager - Insecure Cookie Handling Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...

Grestul SQL Injection

Grestul Sql Injection By Cookie bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.org Let's Go! \admin\login.php : $username = SafeAddSlashes$POST'username'; $passcode = SafeAddSlashesmd5$POST'passcode'; $time = time; $check = SafeAddSlashes$POST'setcookie'; $query = "SELECT...

Simple Machines Forums (BBCode) Cookie Stealing Vulnerability

Exploit for unknown platform in category web applications ============================================================= Simple Machines Forums BBCode Cookie Stealing Vulnerability ============================================================= Author: Xianur0 BBCode of the smf not filtered properly...

Simple Machines Forums (BBCode) Cookie Stealing Vulnerability

No description provided by source. Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...

NewsCMSLite - Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/33467/info NewsCMSLite is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain unauthorized access to the affected...

Gobbl CMS 1.0 - Insecure Cookie Handling

--------------------------- Gobbl Cms 1.0 I.Cookie Hand. --------------------------- Autore: x0r Evolution Team Email: [email protected] Demo Site:http://www.gobbl.net/ --------------------------- Bug In: \admin\auth.php ? include '../config.php'; $user = $POST'user'; $pass = $POST'pass'; if...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ==================================================================== V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln ==================================================================== + V3 Chat - Profiles/Dating Scri...

absolutepodcast-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute Podcast V 1.0 see script http://www.xigla.com/apodcasting/demo.htm Greetz...

aflog-insecure.txt

aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies url: http://www.aflog.org/download.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not...

Konqueror 3.5.9 - load Remote Crash

Konqueror 3.5.9 - load Remote Crash document.load''; milw0rm.com 2008-10-10...