PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

WinXP SP2 Fr Download and Exec Shellcode

No description provided by source. Exploit Title winxp sp2 fr download & exec :: Date 06/5/2010 Author : CrackMaN :: code: ;------------------------------------------- .586 .model flat,stdcall option casemap:none include windows.inc include user32.inc include kernel32.inc include shell32.inc...

Media Player 6.4.9.1 with K-Lite Codec Pack - DoS/Crash (.avi)

No description provided by source. Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vist...

IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...

Microsoft Windows XP TSShutdn.exe Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the TSShutdn.exe command to...

Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow

No description provided by source. $Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

AskMen Purportedly Compromised by Nuclear Pack Kit

Users who visit AskMen.com, a men’s entertainment and lifestyle portal, are being hit with malicious code, potentially stemming from the Nuclear Pack exploit kit, researchers announced today. When a user stumbles across the site – or a localized version aus.askmen.com, etc. of it – malicious code...

Support has ended for Office 2003

Support has ended for Office 2003 Last updated 2014-10-28Support for Office 2003 has ended. All of your Office 2003 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date...

Microsoft released a“denial of service vulnerability”fixes-bug warning-the black bar safety net

In patch 5 9 IE vulnerability after Microsoft finally for its security software to plug a security vulnerability. It is reported that the vulnerability may be in use“Malware Protection engine”Malware Protection Engineto scan when triggered. Then, the attacker can use it to launch denial of...

Symantec Encryption Desktop for OS X World-Writable Files Insecure File Handling

SUMMARY Symantecs Encryption Desktop for OS X installs some temporary files with world-writable attributes during installation. In a multi-user environment, a malicious user could manipulate these world-writable files to read and write files or create files with another users permissions. AFFECTE...

Directory traversal

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

CVE-2014-2610

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

CVE-2014-2610

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

CVE-2014-2610

CVE-2014-2610 affects HP Executive Scorecard (CAP) in versions 9.40 and 9.41. The underlying issue is a directory-traversal flaw in the Content Acceleration Pack web application that allows an authenticated user to upload an executable file, enabling remote code execution. The ZDI advisory confir...

CVE-2014-2610: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

PT-2014-4814

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41 Description The issue allows remote authenticated users to execute arbitrary code by uploading an executable file due to a directory traversal vulnerability in the Content Acceleration Pack CAP...

IBM DB2 9.8 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.8 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists in the GSKit component when initiating SSL/TLS connections due t...

IBM DB2 9.7 < Fix Pack 9a Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 9a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that allows denial of service...

IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...

IBM DB2 9.5 <= Fix Pack 9 or 10 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior or equal to Fix Pack 9 or 10. It is, therefore, reportedly affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that...