1536 matches found
Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC
Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...
Flock Social Web Browser 1.2.5 (loop) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Flock Social Web Browser 1.2.5 loop Remote Denial of Service Exploit ====================================================================== Flock Social Web Browser 1.2.5 loop...
Flock Social Web Browser 1.2.5 (loop) Remote Denial of Service Exploit
Summary Flock is a browser. The people here at Flock are committed to building a browser unlike anything you’ve ever experienced before - because we start by focusing on user needs. We take pride in solving for common behaviors on the Web that seem clunky today, and will seem ridiculous tomorrow...
Google Chrome Browser 0.2.149.27 Denial of Service Exploit
Summary Google Chrome is a web browser that runs web pages and applications with lightning speed. Description An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 0.2.149.27. A crash can result without user interaction. When a user is made to visit a malicious link,...
VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit
Summary VUPlayer is a freeware multi-format audio player for Windows. Description VUPlayer 2.49 suffers from a buffer overflow vulnerability that can be exploited remotely using user interaction and/or crafting. It fails to perform adequate boundry checking of the user input file .m3u playlist,...
BlazeVideo BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit
Summary BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and DV,bookmark and image capture.etc. Furthermore, besides DVD,Video CD,Audio CD, BlazeDVD...
CyberLink PowerDVD <= 8.0 Crafted PLS/M3U Playlist File BoF Vulnerability
Summary CyberLink PowerDVD is a commercial media player for Microsoft Windows and Linux. Several editions of the software are sold including "Ultra", "Deluxe" and "Standard". All editions support the viewing of DVD but only the Ultra edition supports Blu-ray playback. Description PowerDVD is pron...
dotnetnuke-expose.txt
=========================================================== DotNetNuke Default Machine Key Exposure Public Release Date: March 20, 2008 Brian Holyfield - Gotham Digital Science [email protected] Affected Software: DotNetNuke = 4.8.1 Severity: Critical...
Fixed XSS vulnerability at www.science-shop.de
Security researcher Darkster, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting www.science-shop.de, which at the time of submission ranked 731260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/08/2007. It is...
Unfixed XSS vulnerability at www.scienceandsociety.co.uk
Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting www.scienceandsociety.co.uk, which at the time of submission ranked 341761 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It ...
PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability =================================================================== KAPDA::52 - PHP-Post 1.0 Cookie...
PHP-Post 1.0 - Cookie Modification Privilege Escalation
PHP-Post 1.0 - Cookie Modification Privilege Escalation KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23,...
[KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability
KAPDA::47 - Snitz Forum = 3.4.05 SQL-Injection Vulnerability KAPDA New advisory Advisory Number: 47 Vulnerable products : Snitz Forum = 3.4.05 Vendor: http://forum.snitz.com Vulnerability: SQLInjection Date : -------------------- Found : 2006/01/12 Vendor Contacted : 2006/06/03 Release Date :...
Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit
No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! Discovered...
CVE-2006-2317
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject...
CVE-2006-2318
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server...
CVE-2006-2319
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename...
CVE-2006-2320
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps...
CVE-2006-2321
Multiple cross-site scripting XSS vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207...
Design/Logic Flaw
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject...