emc-sql.txt

adMERITia Vulnerability Report Vulnerability Information Vendor: EMC² Product: Centera Universal Access Version: CUA4.04735.p4 Vulnerability Type: Software Flaw Vulnerability: SQL Injection Impact: Attacker can bypass the authentication method and will be logged in as an arbitrary user. With...

EMC Centera Universal Access 4.0_4735.p4 - Username SQL Injection

EMC Centera Universal Access 4.04735.p4 - Username SQL Injection source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacke...

EMC Centera Universal Access 4.0_4735.p4 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploi...

RealPlayer 10 ".smil" File Local Buffer Overflow Exploit

No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...

AOL Instant Messenger AIM "Away" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

DEBIAN-CVE-2008-2957

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...

Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Linux)

The remote host is probable affected by the vulnerabilitys described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. Impact Mozilla contributors mozbugra4, Boris Zbarsk...

Mozilla Firefox, Thunderbird, Seamonkey: Multiple Vulnerabilities (MFSA2008-14) - Linux

Mozilla Firefox, Thunderbird and Seamonkey are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC 0.8.6d SSA Parsing Double Sh311 Universal Exploit

No description provided by source. !/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin http://www.be4mind.com - http://www.gray-world.net...

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal !/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin...

VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal

!/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin http://www.be4mind.com - http://www.gray-world.net WE CODED IT JUST FOR FUN ; Cheers to...

CVE-2007-5664

DB2 DB2 Administration Server (DAS) component db2dasrrm is vulnerable to a local, symlink-based file-overwrite during initialization. Affected versions are IBM DB2 Universal Database: 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16. The underlying issue allows a local user t...

Flash Player cross domain HTTP header flaw

Interaction error between Adobe Flash and multiple Universal Plug and Play UPnP services allow remote attackers to perform Cross-Site Request Forgery CSRF style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primar...

CVE-2008-1234

Cross-site scripting XSS vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."...

CVE-2008-1234

Cross-site scripting XSS vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."...

CVE-2008-1234

This CVE-2008-1234 relates to an XSS vulnerability in Mozilla components: Firefox < 2.0.0.13, Thunderbird < 2.0.0.13, and SeaMonkey

Mozilla Foundation Security Advisory 2008-14

Mozilla Foundation Security Advisory 2008-14 Title: JavaScript privilege escalation and arbitrary code execution Impact: Critical Announced: March 25, 2008 Reporter: mozbugra4, Boris Zbarsky, Johnny Stenback Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.13 Thunderbird 2.0.0.13...

JavaScript privilege escalation and arbitrary code execution — Mozilla

Mozilla contributors mozbugra4, Boris Zbarsky, and Johnny Stenback reported a series of vulnerabilities which allow scripts from page content to run with elevated privileges. mozbugra4 demonstrated additional variants of MFSA 2007-25 and MFSA2007-35 arbitrary code execution through XPCNativeWrapp...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

Microsoft DirectSpeechSynthesis Module Remote Buffer Overflow Exploit

No description provided by source. !-- 7.43 11/06/2007 Microsoft DirectSpeechSynthesis Module XVoice.dll 4.0.4.3303 remote buffer overflow exploit/ IE7/XP SP2 heap spray version Unpublished one, maybe too effective... Otherwise called "SAPI4 exploit" but I consider it nearly universal,...