CVE-2011-0206: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in International Components for Unicode ICU in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via vectors involving uppercase strings...

perl: lc(), uc() routines are laundering tainted data

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

discuz! 7.0 and below the version background get webshell-vulnerability warning-the black bar safety net

Don't need the founder, you'll need administrator. http://www.fuck.com/admincp.php?action=styles&operation=edit&id=1&adv=1 In the following there is a“custom template variables”, the variable in the fill: PHP code 1. OLDJUN', '9 9 9';eval$POSTcmd;// Replace the contents of whatever the input: 1 1...

JQL breaks issue security levels based on custom fields

The MultiSelectCustomFieldIndexer does 2 things: index but don't store a case-folded version in the field "customfield10017:retail" store a "raw" version in a new field with the raw added to the end "customfield10017raw:Retail" The problem is that com.atlassian.jira.security.type.GroupCF looks fo...

mssql hash password cracking method-vulnerability warning-the black bar safety net

mssql hash stored in the table master. dbo. sysxlogins, with select name,password from master. dbo. sysxlogins can extract the user hash. 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b Decomposition: Constant part: 0×0 1 0 0 Salt part: 4E04BE46 Mixi...

Mandriva Update for samba MDKA-2007:001 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKA-2007:001 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Joomla! Component paxxgallery 0.2 - 'gid' Blind SQL Injection

!/usr/bin/perl use strict; use LWP::Simple; print "-+-- Joomla Component PaxxGallery Blind SQL Injection Exploit gid --+-\n"; print "-+-- "more than 1 row" --+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gid= --+-\n"; print "-+-- Dork: option=compaxxgallery...

CVE-2007-3365

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...

CVE-2007-3365

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...

PT-2007-4642 · Myserver · Myserver

Name of the Vulnerable Software and Affected Versions: MyServer versions 0.8.9 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as script source code, by exploiting the improper handling of uppercase characters in filename extensions. This can be...

MDKA-2007:001 : samba

A number of minor issues were present in the samba packages shipped with Mandriva 2007.0. For users with filesystem quotas, samba would not indicate the remaining quota as the free disk space as intended. Problems with storing accounts with upper-case usernames in the smbpasswd passdb backend...

CVE-2006-6556: Undefined Security Weakness

The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows remote attackers to upload and execute arbitrary code via dangerous file extensions that are not all lowercase, which bypasses a cleansing operation...

Design/Logic Flaw

GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...

CVE-2006-0765

CVE-2006-0765 describes a GUI display truncation in ICQ 2003a/2003b and ICQ Lite 4.0/4.1 on Windows, where a filename that is all uppercase and of a specific length causes the malicious file extension to be truncated in the UI, allowing user-assisted remote attackers to bypass security warnings a...

Alpha2 Alphanumeric Unicode Uppercase Encoder

Encodes payload as unicode-safe uppercase text. This encoder uses SkyLined's Alpha2 encoding suite. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/encoder/alpha2/unicodeupper' class MetasploitModule...

Alpha2 Alphanumeric Uppercase Encoder

Encodes payloads as alphanumeric uppercase text. This encoder uses SkyLined's Alpha2 encoding suite. A pure alpha encoder is impossible without having a register that points at or near the shellcode. In a default configuration the first few bytes at the beginning are an fnstenv getpc stub the sam...

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

PT-2003-1602 · Sun · Sun One Application Server

Name of the Vulnerable Software and Affected Versions: Sun ONE Application Server version 7.0 Description: The issue allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension. Recommendations: For Sun ONE...

PT-2001-1972 · Perception · Perception Liteserve

Name of the Vulnerable Software and Affected Versions: Perception LiteServe version 1.25 Description: The issue allows remote attackers to obtain the source code of CGI scripts via URLs that contain MS-DOS conventions, such as upper case letters or 8.3 file names. Recommendations: For Perception...

PT-2001-2370 · Microsoft · Windows 2000

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue concerns the Task Manager in Windows 2000, which does not allow local users to end certain processes via the Process tab. Specifically, processes with uppercase letters in their names, such as winlogon.exe,...