P-News 1.16/1.17 - 'user.dat' Remote Password Disclosure

P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and hash !!!!!!!!!!!!!!!!!!!!!!!!!! You can crack the...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...

NOD32 Anti-Virus CAB文件解析引擎整数溢出漏洞

NOD32 Anti-Virus是一款流行的反病毒软件。 NOD32 Anti-Virus处理CAB文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 特殊构建的.CAB文件，当NOD32 Anti-Virus解析时可导致整数溢出而以应用程序进程权限执行任意指令。 Eset Software NOD32 Antivirus 可参考如下安全公告获得补丁信息： http://eset.com/support/updates.php?pageno=63...

Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability

No description provided by source. Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

NOD32 Anti-Virus多个文件解析漏洞

NOD32 Anti-Virus是一款流行的反病毒软件。 NOD32 Anti-Virus处理多个文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理畸形.chm文件时，可导致除零错误而使应用程序崩溃。特殊构建的.doc文件，可导致整数溢出而以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Eset Software NOD32 Antivirus 可参考如下安全公告获得补丁信息： http://eset.com/support/updates.php?pageno=63...

3editor CMS 0.42 - 'index.php' Local File Inclusion

script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page' include'phplib/treeedit.php'; else...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== Newxooper-php 0.9.1 mapage.php Remote File Include Vulnerability ================================================================== Newxooper-php v0.9.1chemin Remote File...

Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure PHPBuilder v0.0.2 Remote File Disclosure Vulnerability Download: http://sourceforge.net/project/downloading.php?groupname=phpbuilder&filename=phpbuilder-0.0.2.tgz&usemirror=switch Found By: the master exploit:...

Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...

CVE-2006-6619

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6619

CVE-2006-6619 affects AVG Anti-Virus plus Firewall 7.5.431. The vulnerability arises from the product using the Process Environment Block (PEB) to identify a process, allowing a local attacker to bypass the product’s controls by spoofing the PEB fields: ImagePathName, CommandLine, and WindowTitle...

CVE-2006-6619

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

DSA-1238-1 clamav

Bulletin has no description...

CA Anti-Virus多个驱动本地拒绝服务漏洞

CA Anti-Virus是一款杀毒软件。 CA Anti-Virus的vetfddnt.sys和vetmonnt.sys驱动没有正确地处理空缓冲区，允许本地攻击者通过一些IOCTL（METHODBUFFERED）操作导致蓝屏死机。 Computer Associates Anti-Virus for Vista Beta v8.2 Computer Associates Anti-Virus 2007 v8.1 Computer Associates Internet Security Suite 2007 v3.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sophos Anti-Virus扫描引擎Veex.dll多个缓冲区溢出漏洞

Sophos Anti-Virus是一款流行的反病毒程序。 Sophos Anti-Virus处理CPIO档和SIT档存在问题，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以应用程序进程权限执行任意指令。 当解析SIT档时，超长的非NULL终结文件名被Veex.dll处理时，可导致由于字符串实际大小的计算错误而造成堆溢出。 当解析CPIO档时，超长的非NULL终结文件名被Veex.dll处理时，可导致基于堆栈的溢出。 Sophos Anti-Virus 5.2.1 Sophos Anti-Virus 5.2 Sophos Anti-Virus 5.0.4 Sophos Anti-Vir...

CA Anti-Virus multiple DoS conditions

Multiple NULL pointer dereferences...

[Full-disclosure] [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34870: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities CA Vulnerability ID CAID: 34870 CA Advisory Date: 2006-12-13 Discovered By: Ruben Santamarta reversemode.com Impact: Local unprivileged attacker can...

CVE-2006-6496

The 1 VetMONNT.sys and 2 VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service system crash via certain IOCTLs...