Code injection

Unspecified vulnerability in Microsoft Register Server REGSVR allows attackers to cause a denial of service via a crafted DLL library...

CVE-2007-3658

Technical details (affected products, components, root cause, versions, or remediation) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2007-3658

Unspecified vulnerability in Microsoft Register Server REGSVR allows attackers to cause a denial of service via a crafted DLL library...

security flaw

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

Directory traversal

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...

CVE-2007-3272

CVE-2007-3272 affects MiniBB 2.0.5. The vulnerability is a directory traversal in index.php where an attacker can read arbitrary files by manipulating the language parameter in a register action (via ..). Documents do not provide exploitation steps, affected versions beyond 2.0.5, or explicit rem...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow PoC / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you ca...

TutorialCMS <= 1.01 Authentication Bypass Vulnerability

No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...

Authentication flaw

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

TutorialCMS 1.01 - Authentication Bypass

TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php userCP.php PoC:...

CVE-2007-1876

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

[ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV81$2007 ----------------------------------------------------------------------------------------- ECHOADV81$2007 wordpress plugins wordTube = 1.43 wpPATH Remote File Inclusion Vulnerability...

PostNuke Module v4bJournal Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PostNuke Module v4bJournal Remote SQL Injection Vulnerability ============================================================= ---------------------------------------- PostNuke...

Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================ Wordpress plugin wordTube = 1.43 wpPATH RFI Vulnerability ============================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /...

WordPress Plugin wp-Table 1.43 - 'inc_dir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43 incdir Remote File Inclusion Vulnerability...

3proxy 0.5.3g (Windows x86) - proxy.c logurl() Remote Buffer Overflow

3proxy 0.5.3g Windows x86 - proxy.c logurl Remote Buffer Overflow / 3proxyv0.5.3g: win32 service remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy-win32.c -o x3proxy-win32 syntax: ./x3proxy-win32 -pr -h host sumus homepage/url: http://3proxy.ru/...

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

!/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title WebInsta FM = 0.1.4 Remote File Inclusion Vulnerability Description This is a basic file manager written by WebInsta.com Vuln Code In...

WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ======================================================================= WEBInsta FM 0.1.4 login.php absolutepath Remote File Inclusion Exploit ======================================================================= !/usr/bin/perl / \ / \ |...

security flaw

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...