PHP 5.3.3 GD Stack Buffer Overflow

Description: Prior to version 5.3.4, PHP's GD extension did not properly validate the number of anti-aliasing steps passed to the function imagepstext. The value of this parameter is expected to be either 4 or 16. To accommodate this, an array of 16 integers, aa, is located on the stack. Before t...

Camtron CMNC-200 IP Camera - Undocumented Default Accounts

Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The usernames and passwords are listed below...

KCFinder 2.2 Shell Upload

: Exploit Title: kcfinder 2.2 upload shell : : Date: 15/10/2010 : : Author: saudi0hacker : : Software Link: http://kcfinder.sunhater.com/ : : Version: 2.x : : Tested on: linux b0x : : Greetz to : All of my Friends :...

TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published:...

VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

a. Windows-based VMware Tools Unsafe Library Loading vulnerability A vulnerability in the way VMware libraries are referenced allows for arbitrary code execution in the context of the logged on user. This vulnerability is present only on Windows Guest Operating Systems. In order for an attacker t...

SongForever.com-Clone Shell Upload

======================================================================================== | Title : SongForever.com-clone Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...

PHP Dir Submit (aid) Remote SQL Injection Vulnerability

No description provided by source. ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

PHP Dir Submit - aid SQL Injection

PHP Dir Submit - aid SQL Injection ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

Practical Advice For Cleaning Hacked Web Sites

From the HP Security Labs blog If Google detects that your website is hosting malware, it is pretty clear your site has been attacked. A frightening trend with SQL Injection attacks concerns how an attacker will insert links to javascript content used to serve malicious links that may try and...

Best Dating Script Arbitrary Shell Upload Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ |Script info| +++++++++++++++++++++ ======================================================= Shell Upload Vulnerability - script : bestdatingscript - Site : http://www.bestdatingscript.co...

MRCGIGUY Thumbnail Gallery File Upload

MRCGIGUY Thumbnail Gallery Post 1b Remote File Upload Vuln + Discovered By ThE g0bL!N + Vendor:http://www.mrcgiguy.com/ + Download:http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=6 + Greets : SarBoT511 -Sub-ZeRo + Note: It is a Sex Site Thanx God For This Bug : Exploit: ------- 1Go To add Your...

Automated link exchange portal 1.3 - Multiple Vulnerabilities

Automated link exchange portal 1.3 - Multiple Vulnerabilities ------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz...

Job Script 2.0 Shell Upload

/ | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- Job Board = Arbitrary File Upload Vulnerability /- demo : http://www.jobscriptdemo.com /- Greetz : ExH , ProViDoR , Bright D@rk , Error Code , all team /- Proud To Be Egyptian ..... /-...

Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability ==================================================================...

Password Protector SD 1.3.1 - Insecure Cookie Handling

Password Protector SD 1.3.1 - Insecure Cookie Handling ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling...

Password Protector SD 1.3.1 Insecure Cookie

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy + C0ntact :...

Dranzer: Fuzzing for ActiveX vulnerabilities

The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...

Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun Star Downloader Free = v1.45 .dat Universal SEH Overwrite Exploit Vendor:...

Mandriva Update for ksplash-engine-moodin MDVA-2008:067 (ksplash-engine-moodin)

Check for the Version of ksplash-engine-moodin OpenVAS Vulnerability Test Mandriva Update for ksplash-engine-moodin MDVA-2008:067 ksplash-engine-moodin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...