249 matches found
UltraStats 'players-detail.php' SQL注入漏洞
BUGTRAQ ID: 30212 CNCAN ID：CNCAN-2008071501 UltraStats是一款基于PHP的WEB应用程序。 UltraStats不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'players-detail.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 UltraStats 0.2.142 目前没有解决方案提供：...
Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very...
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.:...
Ultrastats 0.2.142 - 'players-detail.php' Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very flexable log analyzing tool for Call of...
Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Ultrastats = 0.2.142 players-detail.php Blind SQL Injection Exploit ====================================================================== !/usr/bin/perl use...
Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit
No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...
creative-overflow.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...
Creative Software AutoUpdate Engine - ActiveX Stack Overflow
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...
CVE-2008-0761
SQL injection vulnerability in index.php in the Prince Clan Chess Club compcchess 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a players action...
Unfixed XSS vulnerability at www.players-sport.info
Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.players-sport.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...
wmp-dos.txt
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?¡1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. áêìÑ éëúÎíþð§õ®ßäÒý áêÏÖÑõøÝÔÑÝèÊ° ÓÞÔÒË°â©ù¼ãÁò× Ü¬×¨Ò´Ò´ôÕÖà÷î If you open the kr.aiff in Window...
Microsoft Windows Media Player - .AIFF Divide By Zero Exception Denial of Service (PoC)
Microsoft Windows Media Player - .AIFF Divide By Zero Exception Denial of Service PoC / Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?∼1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. é€äºº...
Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?∼1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. é€äºº 雨æ‡é•·å ¤è‰è‰²å¤š é€å›å—æµ¦å‹•æ‚²æŒ å¤§åŒæ±Ÿæ°´ä½•æ™‚盡 åˆ¥æ·šå¹´å¹´æ·»ç¶ æ³¢ ...
Multiple video players memory corruption
Memory corruption on malformed AVI file...
RealNetworks players SMIL "wallclock" buffer overflow
Overview A buffer overflow in RealNetworks media players could allow a remote attacker to execute arbitrary code on an affected system. Description The RealNetworks RealPlayer and Helix Player applications allow users to view local and remote audio and video content. These players support multipl...
Pre-open files attack agains locked file
Hello lists, hello Roger. It's me again. Sorry for annoyance, but there is one more attack vector with pre-open files I meant, but forgot to mention. It seems dangerous enough and need to be investigated for different applications. Attack is against application relying on mandatory locks. Attack...
DEBIAN-CVE-2006-6609
Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...
CVE-2006-6609
Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...
CVE-2006-6609
Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...
CVE-2006-6609
Nexuiz before 2.2.1 is affected by a remote DoS vulnerability related to “fake players.” Multiple sources (NVD, OSV, Gentoo GLSA, GLSA plugin) describe that remote attackers can exhaust resources or crash the server through unspecified vectors. The Gentoo GLSA-200702-09 and the Gentoo advisory re...