ActiTime 2.0-MA CSRF Vulnerability

Exploit for php platform in category web applications ================================== ActiTime 2.0-MA CSRF Vulnerability ================================== |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / //...

Arbitrary UNC file read in IE 8

Internet Explorer is vulnerable to a drive-by arbitrary UNC file read, with the usual consequences local account password disclosure, etc. as in IE6 before SP1. It is in ICMFilter, which is accessible via the CSS filter property. Sample exploit code: div...

XSS bug in US Robotics firmware USR5463-v0_06.bin

Hi! This bug was finded in the USR5463 802.11g Wireless Router. !-- Author: SH4V BUG: permanent XSS Firmware: USR5463-v001.bin - USR5463-v006.bin Router: USR5463 802.11g Wireless Router Company: US Robotics Just change http://192.168.2.1/ by your current gateway. -- form...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 6772)

Mozilla XULrunner was upgraded to 1.9.0.17 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application...

HTMLDOC 1.9.x-r1629 local .html buffer overflow(win32) exploit

Exploit for unknown platform in category local exploits ============================================================== HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit ============================================================== /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32...

Kantaris 0.5.6 - Local Denial of Service (PoC)

Kantaris 0.5.6 - Local Denial of Service PoC !/usr/bin/perl Kantaris 0.5.6 local Denial of service Poc Author: Anonymous How i find this bug: I was looking for mkv player because i downloaded 13 seasons of south park. I found Kantaris player and decided to chek it's security. Bug info:Kantaris...

Yonja Shell Upload

..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb:::: ::::d8:::::::::::indoushka:::::::::::8b::::...

Jax Guestbook 3.50 - Admin Login

Jax Guestbook 3.50 - Admin Login Exploit Title: Jax Guestbook 3.50 Admin Login Exploit Date: December 23rd, 2009 Author: Sora Software Link: http://script.wareseeker.com/ASP-NET/jax-guestbook-3.50.zip/32956d53cf Version: 3.50 Tested on: Windows and Linux ------------------------------------------...

MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption

This module exploits a vulnerability in the getElementsByTagName function as implemented within Internet Explorer. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule HttpClients::IE, :uaminver =...

FreeBSD 8.0 Run-Time Link-Editor (RTLD) - Local Privilege Escalation

FreeBSD 8.0 Run-Time Link-Editor RTLD - Local Privilege Escalation Discovered & Exploited by Nikolaos Rangos also known as Kingcope. Nov 2009 "BiG TiME" "Go fetch your FreeBSD r00tkitz" // http://www.youtube.com/watch?v=dDnhthI27Fg There is an unbelievable simple local r00t bug in recent FreeBSD...

PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection

Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. OpenVAS Vulnerability Test $Id: fcore20099973.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9973 BackupPC Authors: Thomas Reinke Copyright: Copyright c 2009...

PHP 5.3.0 - 'pdflib' Arbitrary File Write

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew; pdfopenfile$IRCRASH,$PATH;...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...

Oracle Network Authentication组件远程代码执行漏洞

BUGTRAQ ID: 36747 CVECAN ID: CVE-2009-1979 Oracle Database是一款商业性质大型数据库系统。 远程攻击者可以通过Oracle Net协议向Oracle数据库的Network Authentication组件发送恶意报文导致执行任意代码。 Oracle Database 10.2.0.4 Oracle Database 10.1.0.5 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2009）以及相应补丁: cpuoct2009：Oracle Critical Patch Update...

Fedora 10 : BackupPC-3.1.0-6.fc10 (2009-9973)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-6 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-5 - Fix SELinux policy module for UserEmailInfo.pl file - Fri Apr 10 2009 Johan Cwiklinski 3.1.0-4 - Fix TopDir change bug 473944 Note that Tenable Network Security has extracted the...

Moderate: Red Hat Security Advisory: samba security and bug fix update

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...