3223 matches found
Fixed in Apache Tomcat 7.0.4
Low: SecurityManager file permission bypass CVE-2010-3718 When running under a SecurityManager, access to the file system is limited but web applications are granted read/write permissions to the work directory. This directory is used for a variety of temporary files such as the intermediate file...
VB Installation - Add NEW Administrator user
Exploit for php platform in category web applications ============================================= VB Installation - Add NEW Administrator user ============================================= Title: VB Installation- Add NEW Administrator user Date: 2010-10-06 Author: King of Larestan Version:...
SnackAmp 3.1.3B SMP Buffer Overflow
Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.3 Bet...
SnackAmp 3.1.3B - SMP Buffer Overflow (SEH) (DEP Bypass)
SnackAmp 3.1.3B - SMP Buffer Overflow SEH DEP Bypass Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link:...
Quick Player 1.3 Unicode SEH Exploit
Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
SA-CONTRIB-2010-097 - Imagemenu - Multiple vulnerabilities
The Imagemenu module allows users to create and maintain image based menus. The Drupal 5 branch of this module contains a Cross Site Request Forgery CSRF vulnerability which could allow a malicious user to trick an administrator into unintentionally enabling or disabling menu items provided by th...
Quick Player 1.3 - Unicode (SEH)
Quick Player 1.3 - Unicode SEH Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable applicatio...
Quick Player 1.3 - Unicode (SEH)
Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
SA-CONTRIB-2010-098 - Memcache - Multiple vulnerabilities
The Memcache project provides an alternative cache backend which works with memcached program to speed up high traffic sites. The memcache backend caches the current $user object a little too aggressively, which can lead to a role change not being recognized until the user logs in again. The...
SA-CONTRIB-2010-095 - Lightbox2 - Multiple Vulnerabilities
The Lightbox2 module enables images to be overlaid on the current page using JavaScript. The module displays images above the page instead of within it, freeing the page design from layout constraints and keeping users on the same page. The module does not sanitize some of the user supplied data...
SA-CONTRIB-2010-094 - Embedded Media Field - Access bypass
The Embedded Media Field project is a set of modules that enable editors to post URL's and embed codes for third party media providers such as YouTube, Vimeo, or Flickr, which will be automatically parsed and displayed using preset formatters. The Embedded Video Field module packaged with the...
python-updater: Untrusted search path
Background python-updater is a script used to remerge python packages when changing Python version. Description Robert Buchholz of the Gentoo Security Team reported that python-updater includes the current working directory and subdirectories in the Python module search path sys.path before calli...
Dede CMS blind SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================== Dede CMS blind SQL Injection Vulnerability ========================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...
DJ Studio Pro Version 8.1.3.2.1 SEH Exploit
Exploit for windows platform in category local exploits =========================================== DJ Studio Pro Version 8.1.3.2.1 SEH Exploit =========================================== DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom,...
[DCA-00016 - Nokia E72 Keyboard Password bypass]
DCA-00016 - Nokia E72 Keyboard Password bypass Software/Hardware - Nokia E72 Vendor Product Description - Nokia E72 is a high-performance device tailor-made for seamless business and personal communication. Bug Description - The Nokia E72 keyboard lock have a delay to validate the password and on...
DJ Studio Pro 8.1.3.2.1 - Local Overflow (SEH)
DJ Studio Pro 8.1.3.2.1 - Local Overflow SEH DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Audiotran 1.4.2.4 SEH Overflow
Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/Audiotran.htm Vulnerable version...
ES Simple Download v 1.0. Local File Inclusion Vulnerability
Exploit for php platform in category web applications ============================================================ ES Simple Download v 1.0. Local File Inclusion Vulnerability ============================================================...
Audiotran 1.4.2.4 SEH Overflow Exploit
Exploit for windows platform in category local exploits ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web -...
ES Simple Download 1.0. - Local File Inclusion
ES Simple Download 1.0. - Local File Inclusion ----------------------------Information------------------------------------------------ +Name : ES Simple Download v 1.0. Local File Exclusion/LFI +Autor : Kazza +email : [email protected] +Date : 09.09.2010 +Script : ES Simple Download v 1.0. +Pric...