moinmoin -- superuser privilege escalation

MoinMoin team reports: A check in the userform processing was not working as expected and could be abused for ACL and superuser privilege escalation...

PowerPHPBoard 1.00b - Multiple Local File Inclusions

PowerPHPBoard 1.00b - Multiple Local File Inclusions DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none...

CVE-2008-1097

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in 1 ImageMagick 6.2.4-5 and 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .pcx file that...

Crystal Reports Central Management Server Detection

The remote service is a Central Management Server also known as Crystal Management Server and Automated Process Scheduler, a key component of Crystal Reports Server that centralizes information about users, security levels, published objects, and servers. %NASLMINLEVEL 70300 C Tenable Network...

Race condition

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

CVE-2008-0379

CVE-2008-0379 affects Crystal Reports XI Release 2 (Crystal Reports XI, Enterprise Tree ActiveX control in EnterpriseControls.dll 11.5.0.313). The vulnerability is a race condition in the SelectedSession method that can trigger a buffer overflow, allowing remote attackers to cause a denial of ser...

PT-2008-2012 · Business Objects · Crystal Reports Xi Release 2

Name of the Vulnerable Software and Affected Versions: Crystal Reports XI Release 2 version 11.5.0.313 Description: The issue is related to a race condition in the Enterprise Tree ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrar...

Crystal Reports 'EnterpriseControls.dll' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 27333 CNCAN ID:CNCAN-2008012103 Crystal Reports XI是一款用于专业数据报表应用程序。 Crystal Reports XI包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于"SelectedSession"方法中，在初始化这个组件中，在线程中存在竞争条件错误，同组件的4字节会被EIP覆盖，精心构建4字节数据，可能以应用程序进程权限执行任意指令。 Business Objects Crystal Reports XI Release 2 目前没有解决方案提供：...

CVE-2008-0379: Buffer Copy without Checking Size of Input

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

crystal-dos.txt

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

Crystal Reports XI Release 2 Enterprise Tree Control - ActiveX Buffer Overflow Denial of Service PoC Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote...

Crystal Reports XI Release 2 (Enterprise Tree Control) ActiveX BOF/DoS

No description provided by source. Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg...

Crystal Reports XI Release 2 (Enterprise Tree Control) ActiveX BOF/DoS

Exploit for unknown platform in category dos / poc ====================================================================== Crystal Reports XI Release 2 Enterprise Tree Control ActiveX BOF/DoS ====================================================================== Application: Crystal Reports XI...

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...

CVE-2007-5665

STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...

CVE-2007-5665

STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...

CVE-2007-5665: Undefined Security Weakness

STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...

runcms-sql.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...