Authentication flaw

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

CVE-2007-4961

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

CVE-2007-4960

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

CVE-2007-4960

The CVE-2007-4960 entry concerns an argument-injection vulnerability in Linden Lab’s Second Life secondlife:// protocol handler, used by Internet Explorer (and possibly Firefox). The issue allows a remote attacker to craft a sequence consisting of a quote space ('" ') followed by -autologin and -...

CVE-2007-4961

The CVE-2007-4961 description documents an authentication flaw in Linden Lab Second Life: the login_to_simulator method (used by the secondlife:// protocol handler) transmits an MD5 hash in cleartext in the passwd field, enabling an attacker who can sniff network traffic to login to an account by...

CVE-2007-4960

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

CVE-2007-4961

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

CVE-2007-4960: Undefined Security Weakness

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

PT-2007-6075 · Linden · Second Life

Name of the Vulnerable Software and Affected Versions: Linden Lab Second Life affected versions not specified Description: The issue concerns the login to simulator method, which sends an MD5 hash in cleartext in the passwd field. This allows remote attackers to login to an account by sniffing th...

CVE-2007-4961: Missing Encryption of Sensitive Data

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

Dora Emlak Script v1.0 (tr) Admin Login ByPass

Dora Emlak Script v1.0 tr Admin Login ByPass ilker kandemir ilkerkandemiratmynet.com Download: http://aspindir.com/goster/5027 TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug in ../dora/administartor/yonetim/patron/default.asp cookFirstLevel = Session"FirstLevelSecurity" 'Ilk Gьvenlik Session...

apache mod rewrite exploit (win32)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC

No description provided by source. !-- =============================================================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC By Umesh Wanve...

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC

No description provided by source. !-- =============================================================================================== Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC By Umesh Wanve...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.Activ...

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC

Exploit for unknown platform in category dos / poc =============================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC =============================================================== Second Sight Software ActiveMod.ocx ActiveX Buffer...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.ActiveMod" argCount = 1 arg1=String208, "A" target.Filename = arg1...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown Slot52 As String" memberName = "Slot52" progid = "ActiveGSLib.ActiveGS" argCount...