407 matches found
aspnet-xss.txt
ASP.NET version of Text File Search XSS Vulnerability Software: ASP.NET version of Text File Search download: http://www.aspindir.com/goster/5084 demo: http://aspnet.asp101.com/samples/textfilesearch.aspx Found By: GeFORC3 G3 Example & Exploit : You write xss code in ASP.NET version of Text File...
GestArt Beta 1 - aide.php?aide Remote File Inclusion
GestArt Beta 1 - aide.php?aide Remote File Inclusion .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : GestArt Download : http://www.phpscripts-fr.net/scripts/scripts.php?cat=Gestion Author : Dj7xpl | [email protected]...
Be careful with your attachment text file spoofing-vulnerability warning-the black bar safety net
If the received mail attachments with a look like this file: QQ靓号放送.txt you think it certainly is a plain text file? I have to tell you, not necessarily it! 它 的 实际 文件 名 可以 是 QQ 靓 号 放送 .txt on. 3050F4D8-98B5-11CF-BB82 - 00AA00BDCE0Bin the registry is the HTML file associated with the mean. But the...
Microsoft Windows对象包装程序对话框欺骗漏洞（MS06-065）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的对象包装程序（packager.exe）在处理命令行属性时存在输入验证错误，本地攻击者可能利用此漏洞提升自己的权限。 攻击者可以通过在命令行属性中包含“/”斜线字符欺骗包装程序对话框中的文件名和相关文件类型。这允许攻击者诱骗用户打开包含有嵌入Package对象的Rich Tex或Word文档导致在用户系统上执行任意shell命令。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1...
Zeroboard File Upload & extension bypass Vulnerability
Zeroboard File Upload & extension bypass Vulnerability Author : Choi Min-sung mins at wins21.com Product : Zeroboard http://www.nzeo.com Verndor-Patches : Unpatched Impact : remote code execution Summary ======= Basically, the PHP, HTML, and CGI files are prohibited to upload in Zeroboard. But...
CANews Remote Multiple Vulnerability
------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...
Dayfox Blog Insecure Password Storage
------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...
Wimpy MP3 Player 5 - Text File Overwrite
source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...
Wimpy MP3 Player 5 - Text File Overwrite
Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...
[Full-disclosure] Wimpy MP3 Player - Text file overwrite vulnerability
======================================================================================= XOR Crew :: Security Advisory 2/10/2006 ======================================================================================= Wimpy MP3 Player - Text file overwrite. lame...
Buffer overflow
The cairo library libcairo, as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service persistent client crash via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the...
CVE-2006-0528
The cairo library libcairo, as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service persistent client crash via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the...
[Full-disclosure] gnome evolution mail client inline text file DoS issue
i admit, i posted this bug just a short while ago, but since its an anoyance more then a vuln.. i dont really care.. be glad i didnt demo it here : for evolution users anyway so the issue is with text based file attachments with the "Content-Disposition" set to "inline".. if this text file contai...
PBLang 4.65 (possibly prior versions) remote code execution
PBLang 4.65 possibly prior versions remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure software: description: PBLang is a powerful flatfile Bulletin Board System. It combines many features of a professional board,...
Microsoft IIS 5.1 - WebDAV HTTP Request Source Code Disclosure
source: https://www.securityfocus.com/bid/14764/info Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability. A successful attack causes the Web server to present the requested file as a plain text file and subsequently disclosing the source. It should be noted tha...
gurgens21.txt
Update: 1:02 AM 5/13/2005 Subject: " Gurgens Guest Book Password Database Vulnerability " Vulnerable version: Guest Book 2.1 Description: Guest Book is a complete solution which requires none or very little effort to set up and match existing website configuration. Control Panel with "Virtual...
GXT Editor buffer overflow
Buffer overflow on oversized string in text file...
FreeBSD : vim -- vulnerabilities in modeline handling (bd9fc2bf-5ffe-11d9-a11a-000a95bc6fae)
Ciaran McCreesh discovered news ways in which a VIM modeline can be used to trojan a text file. The patch by Bram Moolenaar reads : Problem: Unusual characters in an option value may cause unexpected behavior, especially for a modeline. Ciaran McCreesh Solution: Don't allow setting termcap option...
