Marc Merlin BAPPA Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla! Component com_booklibrary - SQL Injection

Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1.5 Tested on: PHP Mysql There is a S...

Webmedia Explorer 6.13.1 Cross Site Scripting

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably...

Stored XSS vulnerability in Webmedia Explorer

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Mandriva Update for freetype2 MDVSA-2010:201 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:201 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Q&A: Marc Maiffret of eEye

Marc Maiffret, a security researcher known for his controversial opinions on software security and his efforts to get Microsoft specifically to improve the security of its products, is returning to eEye Digital Security, the vulnerability management company he helped found more than a decade ago...

Ubuntu Update for openoffice.org vulnerability USN-949-1

Ubuntu Update for Linux kernel vulnerabilities USN-949-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9491.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for openoffice.org vulnerability USN-949-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for netpbm-free vulnerability USN-934-1

Ubuntu Update for Linux kernel vulnerabilities USN-934-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9341.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for netpbm-free vulnerability USN-934-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

The Lazy Programmer's Guide to Secure Computing

In this Google TechTalk, HP’s Marc Stiegler describes a different approach to security software...

Marc Maiffret at RSA 2010

Dennis Fisher talks with Marc Maiffret of FireEye at RSA Conference 2010 about the lack of sophistication in the Aurora attack and the state of malware attacks on the Web...

Marc Maiffret on Modern Malware, Code Red and the State of Security Research

Dennis Fisher talks with researcher Marc Maiffret of FireEye about the evolution of modern malware, the discovery of the Code Red worm and how far security research has come in the last 10 years. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

FtpXQ 3.0 - (Authenticated) Remote Denial of Service

!/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found by Marc Doudiet\r\n" " For...

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation scip AG Vulnerability ID 4021 09/08/2009 http://www.scip.ch/?vuldb.4021 I. INTRODUCTION Lotus Notes is a client-server, collaborative application developed and sold by IBM Software Group. More information is available on the official product web...

Windows Media Player WAV/MID/SND文件解析整数溢出漏洞

BUGTRAQ ID: 33018 Windows Media Player是Windows操作系统中默认捆绑的媒体播放器。 如果用户使用Windows Media player打开了恶意的WAV、SND或MID文件的话，就可能触发整数溢出，导致在用户系统上执行任意代码。 Microsoft Windows Media Player 9.0 Microsoft Windows Media Player 11 Microsoft Windows Media Player 10.0 厂商补丁： Microsoft ---------...

Postfix 2.4.92.5.52.6-20080902 - .forward Local Denial of Service

Postfix 2.4.92.5.52.6-20080902 - .forward Local Denial of Service / http://www.wekk.net/research/CVE-2008-4042/CVE-2008-4042-exploit.c http://www.wekk.net/research/CVE-2008-3889/CVE-2008-3889-exploit.c Exploit for Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used...

[scip_Advisory 3808] D-Link DIR-100 long url filter evasion

D-Link DIR-100 long url filter evasion scip AG Vulnerability ID 3808 09/08/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 I. INTRODUCTION D-Link DIR-100 is a small and cost-effective router and firewall device for small offices and home users. More details are available at the official...

about phpMyAdmin setup.php XSS vulnerability

Hi, phpMyAdmin version 2.11.1.1 was released to fix this, along with a security announcement: http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2007-5 which contains a mitigating factor: "We could only trigger it when using Internet Explorer with the 'send URLs as UTF8' setting disabled...

[scip_Advisory 3159] SiteScape forum prior 7.3 Cross Site Scripting

SiteScape forum prior 7.3 Cross Site Scripting scip AG Vulnerability ID 3159 07/13/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 I. INTRODUCTION SiteScape forum is a commercial web forum. It uses presence to connect teams through phone, IM, chat, SMS and email, as well as voice- and...

wagora-disclose.txt

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...