1816 matches found
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CenterIM 4.22.3 - Remote Command Execution
CenterIM 4.22.3 - Remote Command Execution Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bu...
KAPhotoservice (album.asp) Remote SQL Injection Exploit
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ KAPhotoservice album.asp Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS +...
Home FTP Server 1.4.5 Remote Denial of Service Exploit
No description provided by source. Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o...
Security: some HVM domain can access another domain memory.
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...
Centreon <= 1.4.2.3 (index.php) Remote File Disclosure
Info: Software: Centreon = 1.4.2.3 HomePage: http://www.centreon.com Exploit: Remote File Disclosure High Where: include/doc/index.php Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Spanish Hackers Team SHT + Bug In...
Unfixed XSS vulnerability at www.whatsmyip.org
Security researcher quangntenemy, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.whatsmyip.org, which at the time of submission ranked 26760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...
CVE-2008-0553
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...
Php Search Remote Inclusion
Script : PhpSearch Bug : Remote File Inclusion Author : SekoMirza Company : http://www.hawkententerprises.org Download : http://www.hawkenterprises.org/dev/phpsearch.zip Dork : not yet Where : phpsearch/utils/classHTTPRetriever.php Bug : if isreadable$libcurlemuinc requireonce$libcurlemuinc;...
MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass
!/usr/bin/python Exploit for the MOINDID cookie Bug MoinMoin 1.5.x Find your patch in : http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 Bug and exploit coded by just a nonroot and colombian user Enero 21 de 2008 Greets: el directorio and all the SL community import urllib2,sys print "MoinMoin host:...
MoinMoin 1.5.x MOIND_ID cookie Bug Remote Exploit
No description provided by source. !/usr/bin/python Exploit for the MOINDID cookie Bug MoinMoin 1.5.x Find your patch in : http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 Bug and exploit coded by just a nonroot and colombian user Enero 21 de 2008 Greets: el directorio and all the SL community impor...
LulieBlog 1.0.1 - Remote Authentication Bypass
LulieBlog 1.0.1 - Remote Authentication Bypass -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: D.O.M TEAM 2008 we are: ka0x, an0de,...
osData 2.08 Modules Php121 - Local File Inclusion
========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...
smallnuke-sql.txt
!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x365' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Smallnuke cms 'Tahoma 7...
Unfixed XSS vulnerability at www.saritek.com
Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.saritek.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...
Unicode buffer-overflow in Zoom Player 6.00b2
Luigi Auriemma Application: Zoom Player http://www.inmatrix.com Versions: = v6.00 beta 2 and naturally all the stable v5 versions Platforms: Windows Bug: unicode buffer-overflow Exploitation: local Date: 24 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introductio...
MMSLamp - idpro SQL Injection
MMSLamp - idpro SQL Injection Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Page : http://www.brand039.com/?service=prodottidettaglio&idpro=4 Date : 22/12/2007 Bug in : default.php PoC : http://site.com/default.php?service=prodottidettaglio&idpro=SQ...
barracuda-multi.txt
Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...
phpmychat-xssrfi.txt
Application : phpMyChat v0.14.5 Email ; [email protected] Website: http://phpmychat.sourceforge.net/ Many webhosting companies are offering this version of phpMychat in their cpanel : ---------------------------- | Remote File Inclusion: | ----------------------------...
