5366 matches found
jgbbs-sql.txt
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...
JGBBS 3.0beta1 (search.asp author) SQL Injection Exploit
No description provided by source. JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code input name="author" type="text" value="UniquE-Key'UNION SELECT...
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption
!/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket : http://oss.coresecurity.com/projects/impacket.html - PyCrypto :...
Snort 2.6.1 - DCERPC Preprocessor Remote Buffer Overflow
Snort 2.6.1 - DCERPC Preprocessor Remote Buffer Overflow !/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: thi...
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow
!/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: this exploit use Scapy http://www.secdev.org/projects/scapy/...
Snort 2.6.1 DCE/RPC Preprocessor Remote Buffer Overflow DoS Exploit
Exploit for multiple platform in category dos / poc =================================================================== Snort 2.6.1 DCE/RPC Preprocessor Remote Buffer Overflow DoS Exploit =================================================================== !/usr/bin/python Snort DCE/RPC Preprocess...
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow (Denial of Service) (PoC)
!/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow DoS Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit just crash Snort 2.6.1 on Fedora Core 4. However, Code Execution may be possible, but I have no time to make it : I will post the...
Mandrake Linux Security Advisory : tetex (MDKSA-2007:022)
The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...
MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability
Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...
CVE-2007-0103
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 crafted catalog dictionary or 2 a crafted...
CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...
CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by a xpdf 3.0.1 patch 2, b kpdf in KDE before 3.5.5, c poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, v...
Joomla Mosets Tree <= 1.0 Remote File Include Vulnerability
No description provided by source. !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla Mosets Tree = 1.0 Remote File Include Vulnerability...
CVE-2006-4517: Undefined Security Weakness
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service crash in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference...
multiple vulnerabilities in lha
Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...
Joomla Mosets Tree <= 1.0 Remote File Include Vulnerability
Exploit for unknown platform in category web applications =========================================================== Joomla Mosets Tree = 1.0 Remote File Include Vulnerability =========================================================== !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!...
Joomla! Component Mosets Tree 1.0 - Remote File Inclusion
Joomla! Component Mosets Tree 1.0 - Remote File Inclusion !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla Mosets Tree = 1.0 Remote File Include Vulnerability...
Joomla! Component Mosets Tree 1.0 - Remote File Inclusion
!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla Mosets Tree = 1.0 Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild...
Sending multipart/form-data requests from Flash (with arbitrary headers)
Hello lists, In my original "Forging HTTP request headers with Flash" paper http://www.securityfocus.com/archive/1/441014, I mentioned forcing multipart/form-data input format to ensure that Flash's LoadVars isn't used to forge the request. However, there's a work-around for the attacker - using...