5550 matches found
CVE-2008-0191
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure...
DEBIAN-CVE-2008-0191
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure...
Design/Logic Flaw
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure...
Unfixed Redirect vulnerability at www.namninsamling.se
Security researcher Uber0n, has submitted on 19/11/2007 a Redirect vulnerability affecting www.namninsamling.se, which at the time of submission ranked 926966 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently unfixed. ...
[SECURITY] Fedora 8 Update: glib2-2.14.3-1.fc8
GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...
New release of MySQL fixes security bugs
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...
Buffer overflow
The nvcoaft51 driver in Norman Virus Control NVC 5.82 uses weak permissions unrestricted write access for the NvcOa device, which allows local users to gain privileges by 1 triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by 2 sending a crafted KEVENT...
Buffer overflow
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...
Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit
No description provided by source. / 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to get it to point to...
Live for Speed S1S2Demo - .spr Local Buffer Overflow
Live for Speed S1S2Demo - .spr Local Buffer Overflow / 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to...
corehttp 0.5.3alpha (httpd) Remote Buffer Overflow Exploit
No description provided by source. / corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo ...
CoreHTTP http.cčżç¨çźĺ˛ĺşćş˘ĺşćźć´
BUGTRAQ ID: 25120 CoreHTTPćŻä¸ćŹžĺ°ĺçWebćĺĄĺ¨ă CoreHTTPĺ¨ĺ¤çčś éżç¨ćˇčŻˇćąćśĺĺ¨çźĺ˛ĺşćş˘ĺşćźć´ďźčżç¨ćťĺťč ĺŻč˝ĺŠç¨ć¤ćźć´ć§ĺśćĺĄĺ¨ă CoreHTTPçhttp.cćäťśä¸ĺĺ¨çźĺ˛ĺşćş˘ĺşćźć´ďź ----------------------------------------------------------------------- struct sprockt HttpSprockMakestruct sprockt parentsprock struct sprockt sprocket; char reqPATHSIZE,...
corehttp-overflow.txt
/ corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xcorehttp.c -o xcorehttp syntax: ./xcorehttp -r -h host -p port corehttp homepage/url: http://corehttp.sourceforge.net/ bughttp.c:...
ifoto-traversal.txt
ifoto traversal folder enumeration Vendor url:http://ifoto.ireans.com/ Advisore:http://lostmon.blogspot.com/2007/07/ ifoto-traversal-folder-enumeration.html vendor notify:no exploit include:yes ifoto contains a flaw that allows a remote traversal arbitrary folder enumeration.This flaw exists...
iFoto 1.0 - 'index.php' Directory Traversal
source: https://www.securityfocus.com/bid/25065/info iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the...
PR07-20: Webroot disclosure on Webbler CMS
PR07-20: Webroot disclosure on Webbler CMS This advisory has been published following consultation with UK CPNI formerly known as NISCC Date Found: 14th June 2007 Successfully tested on: Webbler CMS version 3.1.3. Earlier versions are possibly affected as well. Note: the version number is usually...
Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow
Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino & prdelka Exploitation steps: 1 The instruction "call dword ecx" is performed with user supplied ECX 2 EAX reference our buffer from retaddr onward 3 we put pointer in ECX to a...
CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...
Classic: Web2. 0 client components vulnerability scanning one-vulnerability warning-the black bar safety net
A, Web2. 0 is the several technology of integrated application of the results, these techniques are: AJAXďźAsynchronous JavaScript and XML,Flash, JSONJavaScript Object Notation,SOAP Simple Object Access Protocol and REST, Representational State Transfer, etc. These techniques coupled with...
Heap overflow
Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers 1 a stack-based buffer overflow during extraction, or 2 a heap-based buffer...