Firefox XML data theft via RDFXMLDataSource and cross-domain redirect

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect...

CVE-2008-6335

CVE-2008-6335 affects the eMetrix Online Keyword Research Tool via a directory traversal in download.php. The vulnerability allows remote attackers to read arbitrary files by supplying a .. sequence in the filename parameter, exposing confidential data. The NVD notes a CVSS v2 base score of 7.8 (...

Fedora Update for openvrml FEDORA-2007-3952

Check for the Version of openvrml OpenVAS Vulnerability Test Fedora Update for openvrml FEDORA-2007-3952 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

linux/x86 file reader 65 bytes + pathname

linux/x86 file reader 65 bytes + pathname. Shellcode exploit for linx86 platform / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xor %ecx, %ecx xor %edx, %edx jmp two one: pop %ebx movb $5, %al xor %ecx, %ecx int $0x80 mov %eax,...

Fedora Update for openvrml FEDORA-2008-2662

Check for the Version of openvrml OpenVAS Vulnerability Test Fedora Update for openvrml FEDORA-2008-2662 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-0018

CVE-2009-0018 affects Apple Mac OS X 10.4.11 and 10.5.6 via the Remote Apple Events server. The vulnerability stems from improper initialization of a buffer, enabling remote attackers to read portions of memory over the network. The NVD entry assigns a CVSSv2 base score of 7.8 (HIGH) with network...

Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities

No description provided by source. Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote...

Kipper 2.01 XSS / LFI / Disclosure

Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote Data Reading :...

Kipper 2.01 - Cross-Site Scripting Local File Inclusion File Disclosure

Kipper 2.01 - Cross-Site Scripting Local File Inclusion File Disclosure Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Securi...

Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Kipper 2.01 XSS/LFI/DD Multiple Vulnerabilities ================================================= Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download...

Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure

Kipper 2.01 Multiple Vulnes Remote Data Reading , Local File Include , Remote XSS Download From : http://www.bookelves.com/kipper/files/kipper20.zip - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote Data Reading :...

CVE-2009-0355

CVE-2009-0355 affects Mozilla Firefox (components/sessionstore/src/nsSessionStore.js). Root cause: code does not block changes to input type="file" during tab restoration, enabling a crafted tab to let a user‑assisted remote attacker read arbitrary files on the client. Impact: local file disclosu...

CVE-2009-0355

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element...

CVE-2008-5936

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

Code injection

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

Ninja Blog 4.8 Remote Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ninja Blog 4.8 Remote Information Disclosure Vulnerability ========================================================== Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May...

mysql reads the file in several ways and application-vulnerability warning-the black bar safety net

Today a friend asked me how to in mysql read the file, the I asked, stunned, found himself still guilty of careless: the problem is, therefore, specially checked the mysql manual. The ideas are the same, in the have the file permissions of the premise, to read the file as a string into a table,...

opera 9.52 using ajax to read a local file vulnerability-vulnerability warning-the black bar safety net

by emptiness prodigal heart This may also be a safety feature right, opera can use ajax to read a local file. ff3 does not have this vulnerability. Not nonsense, look at the code. Use as follows: This piece of code saved as a local htm file, and then use opera to open. Will put a local user name...

RSS Simple News - SQL Injection

RSS Simple News - SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It...

RSS Simple News - SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...