New vulnerabilities in Power Phlogger

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Abuse of Functionality та Denial of Service уязвимостях в Power Phlogger. Abuse of Functionality: Уязвимость в системе восстановления создания нового пароля http://site/dspNewPw.php. Зная "Имя пользователя" или "e-mail" id, который есть...

Easy File Sharing Web Server vfolder参数目录遍历漏洞

BUGTRAQ ID: 33973 Easy File Sharing Web Server允许访客经由浏览器上传/下载文件，拥有FTP和WEB版本。 Easy File Sharing Web Server的thumbnail.ghp模块没有正确地过滤对vfolder参数的输入便用于打开文件，远程攻击者可以通过提交特殊格式的文件请求执行目录遍历攻击，打开任意本地文件。 EFS Software Easy File Sharing Web Server 4.8 厂商补丁： EFS Software ------------...

CVE-2009-0754

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.funcoverload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server...

FreeBSD-SA-09:01.lukemftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:01.lukemftpd Security Advisory The FreeBSD Project Topic: Cross-site request forgery in lukemftpd8 Category: core Module: lukemftpd Announced: 2009-01-07...

CVE-2008-2382

The protocolclientmsg function in vnc.c in the VNC server in 1 Qemu 0.9.1 and earlier and 2 KVM kvm-79 and earlier allows remote attackers to cause a denial of service infinite loop via a certain message...

Avahi multicast DNS server DoS

assert on UDP packet with SRC port 0...

Microsoft GDI+ WMF图像文件缓冲区溢出漏洞(MS08-052)

微软的GDI +缓冲区溢出漏洞，因为矢量图形链接库不当分配内存时解析WMF图像文件。 成功地利用此问题将允许攻击者腐败的记忆和执行任意代码在当前登录的用户。 Research In Motion Blackberry Unite! 1.0.1 bundle 36 Research In Motion Blackberry Unite! 1.0.1 Research In Motion Blackberry Unite! 1.0 Research In Motion Blackberry Professional Software 4.1.4 Research In Motion...

CVE-2008-5284

The CVE-2008-5284 issue affects multiple products where the web server component can crash due to a crafted HTTP Content-Length header with a negative value. Affected are IEA Software RadiusNT/RadiusX (versions 5.1.38 up to but not including 5.1.44), Emerald (5.0.49 up to before 5.0.52), Air Mars...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

GoodTech SSH Server多个SFTP命令栈溢出漏洞

BUGTRAQ ID: 31879 GoodTech SSH Server是运行在Windows系统上的服务器应用，允许远程用户安全的访问主机。 GoodTech SSH Server在处理用户请求时存在漏洞，如果远程攻击者向服务器发送了带有超长字符串参数的SFTP open、opendir或unlink命令的话，就可能触发栈溢出，导致在服务器上执行任意指令。 GoodTech SSH Server 6.4 GoodTech -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.goodtechsys.co...

CVE-2008-4013

CVE-2008-4013 describes an unspecified remote vulnerability in BEA WebLogic Server within the Oracle BEA Product Suite (versions 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6) that can affect confidentiality, integrity, and availability via unknown vectors. Connected documents corroborate an Oracle CPU Oc...

mIRC 6.34 Remote Buffer Overflow PoC

No description provided by source. Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr =...

Gentoo Security Advisory GLSA 200509-10 (mailutils)

The remote host is missing updates announced in advisory GLSA 200509-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Unreal Tournament 3 v1.3 Remote Directory Traversal Vulnerability ================================================================= Luigi Auriemma Application: Unreal...

Femitter FTP Server 1.03 - RETR Remote Denial of Service (PoC)

Femitter FTP Server 1.03 - RETR Remote Denial of Service PoC /0-----------------------------------------------------------------------------------0\ 0 0 | | | Femitter FTP Server 1.03 RETR Remote Denial of Service Exploit PoC | | | | Summary: Femitter Server is an easy-to use HTTP and FTP server...

MemHT Portal <= 3.9.0 Remote Create Shell Exploit

Exploit for unknown platform in category web applications ================================================= MemHT Portal = 3.9.0 Remote Create Shell Exploit ================================================= !/usr/bin/perl MemHT Portal = 3.9.0 Perl exploit discovered & written by Ams DESCRIPTION:...

Server: CGI accept language buffer overflow

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted Accept-Language HTTP header...

[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...

Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...

CVE-2008-2360

Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow...