SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 6772)

Mozilla XULrunner was upgraded to 1.9.0.17 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application...

HTMLDOC 1.9.x-r1629 local .html buffer overflow(win32) exploit

Exploit for unknown platform in category local exploits ============================================================== HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit ============================================================== /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32...

Kantaris 0.5.6 - Local Denial of Service (PoC)

Kantaris 0.5.6 - Local Denial of Service PoC !/usr/bin/perl Kantaris 0.5.6 local Denial of service Poc Author: Anonymous How i find this bug: I was looking for mkv player because i downloaded 13 seasons of south park. I found Kantaris player and decided to chek it's security. Bug info:Kantaris...

Yonja Shell Upload

..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb:::: ::::d8:::::::::::indoushka:::::::::::8b::::...

Jax Guestbook 3.50 - Admin Login

Jax Guestbook 3.50 - Admin Login Exploit Title: Jax Guestbook 3.50 Admin Login Exploit Date: December 23rd, 2009 Author: Sora Software Link: http://script.wareseeker.com/ASP-NET/jax-guestbook-3.50.zip/32956d53cf Version: 3.50 Tested on: Windows and Linux ------------------------------------------...

FreeBSD 8.0 Run-Time Link-Editor (RTLD) - Local Privilege Escalation

FreeBSD 8.0 Run-Time Link-Editor RTLD - Local Privilege Escalation Discovered & Exploited by Nikolaos Rangos also known as Kingcope. Nov 2009 "BiG TiME" "Go fetch your FreeBSD r00tkitz" // http://www.youtube.com/watch?v=dDnhthI27Fg There is an unbelievable simple local r00t bug in recent FreeBSD...

PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection

Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...

MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption

This module exploits a vulnerability in the getElementsByTagName function as implemented within Internet Explorer. Module Options msf use exploit/windows/browser/ms09/072styleobject msf undefined072styleobject show actions ...actions... msf undefined072styleobject set ACTION msf...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. OpenVAS Vulnerability Test $Id: fcore20099973.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9973 BackupPC Authors: Thomas Reinke Copyright: Copyright c 2009...

PHP 5.3.0 - 'pdflib' Arbitrary File Write

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew; pdfopenfile$IRCRASH,$PATH;...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...

Oracle Network Authentication组件远程代码执行漏洞

BUGTRAQ ID: 36747 CVECAN ID: CVE-2009-1979 Oracle Database是一款商业性质大型数据库系统。 远程攻击者可以通过Oracle Net协议向Oracle数据库的Network Authentication组件发送恶意报文导致执行任意代码。 Oracle Database 10.2.0.4 Oracle Database 10.1.0.5 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2009）以及相应补丁: cpuoct2009：Oracle Critical Patch Update...

Fedora 10 : BackupPC-3.1.0-6.fc10 (2009-9973)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-6 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-5 - Fix SELinux policy module for UserEmailInfo.pl file - Fri Apr 10 2009 Johan Cwiklinski 3.1.0-4 - Fix TopDir change bug 473944 Note that Tenable Network Security has extracted the...

Moderate: Red Hat Security Advisory: samba security and bug fix update

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow (PoC)

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow PoC / 0dayNotepad++ 5.4.5 Local .C/CPP Stack Buffer Overflow POC by fl0 fl0w / / LATEST FIXES Notepad++ v5.4.5 fixed bugs from v5.4.4 : 1. Fix plugins shortcuts not working bug. 2. Fix the tooltip on toolbar display bug for the plugins icons. ...

Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion

--------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

PHPSANE 0.5.0 - save.php Remote File Inclusion

PHPSANE 0.5.0 - save.php Remote File Inclusion ----------------------------------------------------------------------------------- phpSANE v 0.5.0 save.php Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------- Author: CoBRa21 Mail:...