Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)

A stack buffer overflow vulnerability exists in Poster Software PUBLISH-iT. The vulnerability is due to insufficient validation on the length of entry names in a "styl" record when processing PUI files. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a...

CVE-2014-0980

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

Buffer overflow

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

CVE-2014-0980

CVE-2014-0980 : A stack-based buffer overflow in Poster Software PUBLISH-iT 3.6d arises while processing .PUI files due to insufficient validation of the length of entry names in a “styl” record. This leads to remote code execution when a user opens a crafted PUI file. Public material confirms th...

CVE-2014-0980

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

ThinkSNS 一处越权操作

简要描述： 越权 详细说明： 登录后到招贴板： http://t.thinksns.com/app/poster 可见到每一个帖子URL后面的ID http://t.thinksns.com/app/poster/edit/我是ID?typeId=1 除了可以修改自己发的贴 还可以修改其他用户的帖子 漏洞证明： 例如：http://t.thinksns.com/app/poster/edit/516?typeId=1 成功修改帖子...

Yahoo Answer Wordpress Auto Poster Cross Site Scripting

Exploit Title: Yahoo Answer Wordpress Auto PosterPlugin "3 OR "alertdocument.cookie Dem0 : http://www.tryscripts.org/wordpress/yahoo/ FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D Hackers,...

Discuz!NT 2.x - 3.5.2 SQL注入

简要描述： Discuz!NT 是康盛创想Comsenz旗下的一款功能强大的基于 ASP.NET 平台的社区软件。 详细说明： ajaxtopicinfo.ascx用户控件 poster SQL注入漏洞 漏洞证明： 文件 admin/UserControls/ ajaxtopicinfo.ascx 中 转到函数 GetCondition WebsiteManage.cs //62 行 if posterlist != "" string poster = posterlist.Split','; condition += " AND poster in "; string...

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

ASP Makit News/Blog Poster 3.1 Database Disclosure

======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

makit newsblog poster 3.1 - Database Disclosure

makit newsblog poster 3.1 - Database Disclosure ======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - O...

makit news/blog poster v3.1 DB Download Vulnerability

Exploit for unknown platform in category web applications ===================================================== makit news/blog poster v3.1 DB Download Vulnerability =====================================================...

makit news/blog poster v3.1 DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi...

CVE-2009-2786

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter...

nokia-spoof.txt

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6131 NFC Firmware: V 05.12, 19-09-07, RM-216 Device Type: mobile phone OS: Symbian Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URI/URL Spoofing when...

Nokia 6131 NFC URI/URL Spoofing and DoS Advisory

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6131 NFC Firmware: V 05.12, 19-09-07, RM-216 Device Type: mobile phone OS: Symbian Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URI/URL Spoofing when...

makit-sql.txt

Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...

myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof'

PHOX: myPHP v3 Final 'Sender/Poster Exploit' Content - Credits - 'sploit - Solution Credits Exploit discovered by Phox/Terencentanio/Phoxpherus of Root32. Email: [email protected] / [email protected] 'sploit There are two exploits here. 1. Posting as someone else. It's...

Poster 2.0 - Unauthorized Privileged User Access

Poster 2.0 - Unauthorized Privileged User Access source: https://www.securityfocus.com/bid/8426/info A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access...

Poster 2.0 - Unauthorized Privileged User Access

source: https://www.securityfocus.com/bid/8426/info A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access this variable to add additional adminstrator users...