4663 matches found
CVE-2009-4143
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...
PHP session.save_path 存在安全绕过漏洞
No description provided by source...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
Spider Solitaire - Denial of Service (PoC)
Spider Solitaire - Denial of Service PoC...
Spider Solitaire PoC
No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...
Spider Solitaire PoC
Exploit for unknown platform in category local exploits ==================== Spider Solitaire PoC ==================== Title: Spider Solitaire PoC CVE-ID: OSVDB-ID: Author: SirGod Published: 2009-10-15 Verified: yes view source print? 0day.today 2018-03-19...
CDBurnerXP 4.2.4.1351
No description provided by source. !/usr/bin/env python CDBurnerXP v 4.2.4.1351 Local Crash PoC Found By: DrIDE Tested On: XPSP3, 7RC Usage: Create New Data Disc, Add a Folder, Paste to Rename Folder, Click Save Compilation as ISO Notes: Super lame and most likely not exploitable. ''' Error...
CVE-2009-3248
Cross-site request forgery CSRF vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php...
PowerISO 4.0 Buffer Overflow
!/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000 EDX 00004000 EBX 00000000 ESP...
PowerISO 4.0 - Local Buffer Overflow (PoC)
PowerISO 4.0 - Local Buffer Overflow PoC !/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX...
PowerISO 4.0 Local Buffer Overflow PoC
No description provided by source. !/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000...
CVE-2009-2171
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...
Prevent global settings from being accidentally overwritten
On a number of occasions, upgrading Extranet has triggered some kind of bug that has caused the global settings to be reset to their default values. The most obvious cause of this is that some piece of code has created a new Settings object and saved it through the settings manager. One way to...
Prevent global settings from being accidentally overwritten
On a number of occasions, upgrading Extranet has triggered some kind of bug that has caused the global settings to be reset to their default values. The most obvious cause of this is that some piece of code has created a new Settings object and saved it through the settings manager. One way to...
Prevent global settings from being accidentally overwritten
On a number of occasions, upgrading Extranet has triggered some kind of bug that has caused the global settings to be reset to their default values. The most obvious cause of this is that some piece of code has created a new Settings object and saved it through the settings manager. One way to...
CVE-2009-1339
Cross-site request forgery CSRF vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434...
Absolute Form Processor XE-V 1.5 Password Changer
Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password : input type="password" name="pwd" size="40" value...
Absolute Form Processor XE-V 1.5 - Remote Change Password
Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password : font size="2" fa...
CVE-2009-1311
Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...
Firefox POST data sent to wrong site when saving web page with embedded frame
Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...