Unfixed XSS vulnerability at www.fuanna.com.cn

Security researcher n-bl4x, has submitted on 10/02/2009 a cross-site-scripting XSS vulnerability affecting www.fuanna.com.cn, which at the time of submission ranked 653927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

CVE-2009-3214: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

An image gallery 1.0 (navigation.php) Local Directory Traversal Vuln

No description provided by source. ------------------------------------------------------------------------- An image gallery 1.0navigation.php Local Directory Traversal ------------------------------------------------------------------------- Author : ThE g0bL!N Download :...

An image gallery 1.0 (navigation.php) Local Directory Traversal Vuln

Exploit for unknown platform in category web applications ==================================================================== An image gallery 1.0 navigation.php Local Directory Traversal Vuln ====================================================================...

An image Gallery 1.0 - 'navigation.php' Local Directory Traversal

------------------------------------------------------------------------- An image gallery 1.0navigation.php Local Directory Traversal ------------------------------------------------------------------------- Author : ThE g0bL!N Download :...

Hamster Audio Player 0.3a (Associations.cfg) Local Buffer Exploit (SEH)

Exploit for unknown platform in category local exploits ======================================================================= Hamster Audio Player 0.3a Associations.cfg Local Buffer Exploit SEH ======================================================================= !/usr/bin/perl by ThE g0bL!N...

TFTPUtil GUI 1.3.0 - Remote Denial of Service

!/usr/bin/python import socket import sys from time import Download:http://www.brothersoft.com/tftputil-131537.html Note; Good Ramadan For all MuSLimS if lensys.argv!=2: print "xTFTPUtil GUI 1.3.0 GUI Remote Denial Of Service Exploit" print "xAuthor : ThE g0bL!N" print "xBig Thanx : His0k4\n" pri...

TFTPUtil GUI 1.3.0 Denial Of Service

!/usr/bin/python import socket import sys from time import Download:http://www.brothersoft.com/tftputil-131537.html Note; Good Ramadan For all MuSLimS if lensys.argv!=2: print "xTFTPUtil GUI 1.3.0 GUI Remote Denial Of Service Exploit" print "xAuthor : ThE g0bL!N" print "xBig Thanx : His0k4\n" pri...

CVE-2009-2888: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter...

broid 1.0 Beta 3a Buffer Overflow

!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...

Playlistmaker 1.51 (.m3u File) Local Buffer Overflow Exploit (SEH)

No description provided by source. Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems to be compiled wi...

Playlistmaker 1.51 - '.m3u' Local Buffer Overflow (SEH)

Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems to be compiled with SafeSEH on in XP SP3. However,...

Playlistmaker 1.51 Buffer Overflow

Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems to be compiled with SafeSEH on in XP SP3. However,...

Playlistmaker 1.51 (.m3u File) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================== Playlistmaker 1.51 .m3u File Local Buffer Overflow Exploit SEH ================================================================== Playlistmaker version 1.51 Tested on Windows...

CVE-2008-6967

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

Cross site scripting

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

CVE-2008-6967

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

CVE-2008-6967

The CVE-2008-6967 entry concerns Alt-N MDaemon WorldClient in versions up to 10.0.1, with multiple unspecified vulnerabilities in WorldClient potentially involving cross-site scripting (XSS). The connected documents corroborate affected product (MDaemon/WorldClient), imply an XSS-related risk, an...

CVE-2008-6967: Undefined Security Weakness

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

KLA10249 Vulnerability in MDaemon

Multiple unspecified vulnerabilities were found in MDaemon. By exploiting this vulnerability malicious users can have an unknown impact on vectors related to XSS. Original advisories - Exploitation Related products MDaemon CVE list CVE-2008-6967 warning Solution Update to latest version Impacts S...