CVE-2009-2841: Undefined Security Weakness

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

Multiple Vendor Telnet Client LINEMODE Buffer Overflow (CVE-2005-0469)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

CVE-2009-3156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0167)

java-1.5.0-ibm packages that correct a security issue are available for Red Hat Enterprise Linux 5 Supplementary and Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

ShaadiClone 2.0 (addadminmembercode.php) Add Admin Exploit

No description provided by source. !-- » ShaadiClone v2.0 addadminmembercode.php Add Admin » Live Demo: http://www.shaadiclone.com/demo/index.php » By: x.CJP.x » Greeting : His0k4,Sub-Zero,Bibi-info,Aach2006,Youness,Simitch,Halimz,B0ub0u,Mun3im.. := » Note:Walleh Ghir 3la Jalek Lakhater W3adtek T...

PowerCHM 5.7 (Long URL) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ================================================ PowerCHM 5.7 Long URL Local Stack Overflow PoC ================================================ PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo email protected thnaks to hisok4...

PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)

PowerCHM 5.7 Long url Local stack overflow SEH POC found By SuB-ZeRo [email protected] thnaks to hisok4 Greetz:All friends and muslims HackeRs secdz.com var crash = "http://"; for i=0;iB00M!'; milw0rm.com 2009-04-14...

Mandriva Update for kernel MDKA-2007:036 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKA-2007:036 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for kernel MDKA-2007:036 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKA-2007:036 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

FreeBSD : perl -- Directory Permissions Race Condition (4a99d61c-f23a-11dd-9f55-0030843d3802)

Secunia reports : Paul Szabo has reported a vulnerability in Perl File::Path::rmtree, which potentially can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a race condition in the way File::Path::rmtree handles directory permissions when...

Click And Email SQL Injection

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch --------------------------------------------------------- Exploit Auth Bypass...

ClickEmail - Authentication Bypass

ClickEmail - Authentication Bypass Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch...

Code injection

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169: Undefined Security Weakness

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

ASP ActionCalendar 1.3 - Authentication Bypass

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

DMXReady Catalog Manager 1.1 Remote Contents Change

Title : DMXReady Catalog Manager http://target/path//applications/CatalogManager/inccatalogmanager.asp Edit - http://target/path//admin/CatalogManager/CategoryManager/list.asp :...

Sun Java System Access Manager 'sub-realm'特权提升漏洞

BUGTRAQ ID: 33266 CNCAN ID：CNCAN-2009011503 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java System Access Manager存在安全漏洞，允许sub-real管理员提升特权或访问root realm作为管理员。 目前没有详细漏洞细节提供。 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access...

DMXReady Registration Manager 1.1 - Contents Change

DMXReady Registration Manager 1.1 - Contents Change Title : DMXReady Registration Manager http://target/path//applications/RegistrationManager/incregistrationmanager.asp Edit - http://target/path//admin/RegistrationManager/addcategory.asp : milw0rm.com 2009-01-14...