5627 matches found
Image upload formula deceptive vulnerability tutorials-vulnerability warning-the black bar safety net
For the reader: the script to attack the lovers, ASP programmer Pre-knowledge: none Image upload formula spoofing attacks Wen/ Yan into the This vulnerability applies to all only check the uploaded file format of the program, put the images into HTML code, after uploading the executable to do the...
FeedMon 2.7.0.0 outline Tag Buffer Overflow Exploit PoC
No description provided by source. !usr/bin/perl -w Reference: http://security.bkis.vn/?p=329 http://www.securityfocus.com/bid/33630/info Tested on Windows Server 2003 with FeedMon 2.7.0.0. FeedMon crashes whenever I am trying to Unsubscribe from the maliciousoverlylong feed. Thanx to milw0rm,...
Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net
Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...
Personal Site Manager <= 0.3 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================= Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url =...
Personal Site Manager 0.3 - Remote Command Execution
Personal Site Manager 0.3 - Remote Command Execution --+++===========================================================================+++-- --+++====== Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url =...
Personal Site Manager 0.3 - Remote Command Execution
--+++===========================================================================+++-- --+++====== Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url = "http://$hostname$path/psm/uploadfile.php?submit=banane...
Personal Site Manager <= 0.3 Remote Command Execution Exploit
No description provided by source. --+++===========================================================================+++-- --+++====== Personal Site Manager = 0.3 Remote Command Execution Exploit ======+++-- --+++===========================================================================+++--...
Design/Logic Flaw
The Trend Micro Personal Firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which...
CVE-2008-3866
Affected product : Trend Micro OfficeScan NSC components (TmPfw.exe) used in OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007/2008 (17.0.1224). Vulnerability : The Personal Firewall service relies on client-side password protection in the configuration GUI, but this check is not enforced by ...
MKPortal 1.2.1 - Multiple Vulnerabilities
MKPortal 1.2.1 - Multiple Vulnerabilities waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web:...
Cross site request forgery (csrf)
The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...
CVE-2008-5724
The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...
CVE-2008-5724
The Personal Firewall driver aka epfw.sys 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHODNEITHER IOCTL request to \Device\Epfw that overwrites portions of memory...
Personal Sticky Threads v1.0.3c vbulletin Add-on problem
Personal Sticky Threads is an addon for vbulletin that allows users to create personal stickies. There appears to be a small problem when toggling the personal sticky on a thread you do not have persmission to access. If I am denied persmission to: http://forums.somesite.com/showthread.php?t=7...
XM Easy Personal FTP Server Denial of Service Vulnerability
This host is running XM Easy FTP Personal FTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasyftpdosvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ XM Easy Personal FTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 20...
CVE-2008-5667
The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service memory corruption and application crash via a malformed RAR archive...
CVE-2008-5667
CVE-2008-5667 affects VirusBlokAda VBA32 Personal Antivirus (3.12.8.x). The vulnerability is in the scanning engine, which can cause a denial of service via memory corruption when handling a malformed RAR archive. The OpenVAS NASLs corroborate a DoS condition; the NVD entry explicitly notes memor...
CVE-2008-5626
CVE-2008-5626 affects XM Easy Personal FTP Server via NLST DoS. Public details in connected docs show vulnerable versions 5.6.0 and 5.7.0 can be crashed by a crafted NLST argument (e.g., -1); disclosure notes authenticated access is required (per initial description), with related Metasploit modu...
CVE-2008-5626
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument...
CVE-2008-5592
Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb...