Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935...

CVE-2008-6935

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...

CVE-2008-6937

CVE-2008-6937 affects Exodus 0.10 and describes an argument injection vulnerability where remote attackers can inject arbitrary command line arguments, overwrite arbitrary files, and trigger denial of service by using encoded spaces in an xmpp:// URI (different vector from CVE-2008-6935/6936). Th...

[SECURITY] Fedora 11 Update: apr-util-1.3.9-1.fc11

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

[SECURITY] Fedora 10 Update: apr-util-1.3.9-1.fc10

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

CommuniGate Pro WebMail URI解析HTML注入漏洞

BUGTRAQ: 35783 Communigate Pro邮件服务器存在存储式跨站脚本漏洞。如果远程攻击者提交了包含有特制URL的纯文本邮件消息的话，就会在用户阅读邮件时执行嵌入的JavaScript代码。成功利用这个漏洞的攻击者可以窃取敏感信息或执行HTML或脚本代码。 Communigate Pro 5.2.14 厂商补丁： Stalker ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.communigate.com/cgatepro/History52.html...

Mob oLyrics Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

VLC 0.8.6f smb:// Buffer Overflow

/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: http://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...

Mob Astro Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

VLC 0.8.6f smb:// Universal Buffer Overflow

!/usr/bin/python Exploit : VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit univ Credits : Pankaj Kohli Exploit : His0k4 header1= "\x3c\x3f\x78\x6d\x6c\x20\x76\x65\x72\x73\x69\x6f\x6e\x3d\x22\x31" "\x2e\x30\x22\x20\x65\x6e\x63\x6f\x64\x69\x6e\x67\x3d\x22\x55\x54"...

VideoLAN VLC Media Player 0.8.6f - smb: URI Handling Remote Universal Buffer Overflow

VideoLAN VLC Media Player 0.8.6f - smb: URI Handling Remote Universal Buffer Overflow !/usr/bin/python Exploit : VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit univ Credits : Pankaj Kohli Exploit : His0k4 header1= "\x3c\x3f\x78\x6d\x6c\x20\x76\x65\x72\x73\x69\x6f\x6e\x3d\x22\x31"...

VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit

No description provided by source. / VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: http://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include stdio.h include string.h ...

VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit (univ)

Exploit for windows platform in category remote exploits ===================================================================== VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit univ ===================================================================== !/usr/bin/python Exploit : VLC...

VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit (univ)

No description provided by source. !/usr/bin/python Exploit : VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit univ Credits : Pankaj Kohli Exploit : His0k4 header1= "\x3c\x3f\x78\x6d\x6c\x20\x76\x65\x72\x73\x69\x6f\x6e\x3d\x22\x31"...

VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit

Exploit for windows platform in category remote exploits ============================================================== VLC Media Player 0.8.6f smb:// URI Handling Remote BOF Exploit ============================================================== / VLC Media Player 'smb://' URI Handling Remote...

Adobe Flash Player 10.0.22 AIR - URI Parsing Heap Buffer Overflow (PoC)

Adobe Flash Player 10.0.22 AIR - URI Parsing Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/35902/info Adobe Flash Player and Adobe AIR are prone to a heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the...

VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow

/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...

Adobe Flash Player 10.0.22 / AIR - URI Parsing Heap Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/35902/info Adobe Flash Player and Adobe AIR are prone to a heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition. This...

Google Chrome 'chrome://history/' URI跨站脚本漏洞

Bugraq ID: 35841 Google Chrome是一款流行的WEB浏览器。 Google Chrome处理特殊构建的URI缺少充分过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 构建如下的URI，诱使用户访问，可获得目标用户敏感信息： chrome://history/q=%22%3E%3Cmarquee%3E%3Ch1%3Ebikolinux%3C%2Fh1%3E%3C%2 Fmarquee%3E view-source:chrome://history/q="marqueeh1bikolinux/h1/marquee...

Google Chrome 'About:blank'地址栏URI伪造漏洞

Bugraq ID: 35839 CNCAN ID：CNCAN-2009072908 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在URL伪造问题，远程攻击者可以利用漏洞使目标用户盲目信任页面，泄漏敏感信息。 通过"window.open"调用包含"%20"等特殊字符的域时，可导致在子窗口的地址栏中显示任意URL，使用户盲目信任，可能导致泄漏敏感信息。 Google Chrome 2.0.172 37 Google Chrome 2.0.172 33 Google Chrome 2.0.172 31 Google Chrome 2.0.172 30...