TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.8.1 and below Vulnerability Type: Cross-Site Scripting Severit...

Microsoft Word Record Parsing Buffer Overflow

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 Greets Villy, Abhishek Lyall and ASL IT SECURITY TEAM Author Abhishek Sahni - abhi00703atgmaildotcom, infoataslitsecuritydotcom Web -...

Monoloco CMS (page.php) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Monoloco CMS page.php Remote SQL Injection Vulnerability ========================================================== Author : KnocKout Thanks : DaiMon,Barcod3 Contact : email protected...

Dolphin Smart Community Builder Sql Injection Vulnerability

Exploit for php platform in category web applications =========================================================== Dolphin Smart Community Builder Sql Injection Vulnerability =========================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1...

sasp cms (fckeditor) shell upload Vulnerability

Exploit for php platform in category web applications =============================================== sasp cms fckeditor shell upload Vulnerability =============================================== Author: ashiyane digital security team Version: 0.9 Category:: upload bug discovered by:ramin bazghan...

Rosoft media player 4.4.4 SEH Buffer Overflow

No description provided by source. !/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author: dijital1 Original Advisory: http://www.exploit-db.com/exploits/14601 - abhishek lyall Download: http://www.exploit-db.com/application/14601/ Platform: Windows XP...

123 FlashChat 7.8 - Multiple Vulnerabilities

123 FlashChat 7.8 - Multiple Vulnerabilities |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

123 Flashchat version 7.8 Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ========================================================= 123 Flashchat version 7.8 Multiple Remote Vulnerabilities ========================================================= |-----------------------------------------------------------------...

Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (2)

Rosoft Media Player 4.4.4 - Local Buffer Overflow SEH 2 !/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author: dijital1 Original Advisory: http://www.exploit-db.com/exploits/14601 - abhishek lyall Platform: Windows XP SP3 EN Professional - VMware Greet...

Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (2)

!/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author: dijital1 Original Advisory: http://www.exploit-db.com/exploits/14601 - abhishek lyall Platform: Windows XP SP3 EN Professional - VMware Greetz to: Corelan Security Team, Exploit-db, OffSec...

Rosoft media player 4.4.4 SEH Buffer Overflow

Exploit for windows platform in category local exploits ============================================= Rosoft media player 4.4.4 SEH Buffer Overflow ============================================= !/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author:...

Xion Player 1.0.125 - Local Stack Buffer Overflow

Xion Player 1.0.125 - Local Stack Buffer Overflow !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...

Xion Player 1.0.125 - Local Stack Buffer Overflow

!/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory: http://www.exploit-db.com/exploits/14517 hadji samir Platform: Window...

[DCA-0009] - NetWordDLS Finger Server Denial of Service

DCA-0009 - NetWordDLS Finger Server Denial of Service Software - NetWordDLS Finger Server Vendor Product Description - A windows server application that reports back to users the machine name and the current logged on user Bug Description - Server does not validate the input size leading to a...

SA-CONTRIB-2010-088 - Content Construction Kit (CCK) - Access Bypass

The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. The CCK "Node Reference" module provides a backend URL that is used for asynchronous requests by the "autocomplete" widget to locate nodes the user can reference. In som...

SA-CONTRIB-2010-084 - OpenID - Authentication bypass

The OpenID module provides users the ability to login to sites using an OpenID account. The OpenID module doesn't implement the all required verifications from the OpenID 2.0 protocol and is vulnerable to a number of attacks. Specifically: - OpenID should verify that a "openid.responsenonce" has...

SopCast 3.2.9 - Remote Command Execution

Sopcast POC by Sud0 Tested on XP SP3 EN on VBox with IE 7 Spraying a lot to get a nice unicode usable address 0x20260078 I sprayed with a set of P/P/R instructions to come back to the stack Need internet connection on the box to trigger the vuln Wait for the Spray to finish IE will seem freezed f...

SopCast 3.2.9 - Remote Command Execution

SopCast 3.2.9 - Remote Command Execution Sopcast POC by Sud0 Tested on XP SP3 EN on VBox with IE 7 Spraying a lot to get a nice unicode usable address 0x20260078 I sprayed with a set of P/P/R instructions to come back to the stack Need internet connection on the box to trigger the vuln Wait for t...

Quick N Easy FTP Server 3.9.1 Buffer Overflow

Software: Quick Easy FTP Server =3.9.1 Vulnerability Published :2010-07-22 Vulnerability Update Time :2010-07-25 Vendor: No vendor response Impact: Low Bug Description: Quick Easy FTP Server does not validate the USER command input size leading to a Denial Of Service flaw while sending more than...

Quick Easy FTP Server USER command Vulnerability

Software: Quick Easy FTP Server =3.9.1 Vulnerability Published :2010-07-22 Vulnerability Update Time :2010-07-25 Vendor: No vendor response Impact: Low Bug Description: Quick Easy FTP Server does not validate the USER command input size leading to a Denial Of Service flaw while sending more than...