9941 matches found
Sophos Anti-Virus Petite插件拒绝服务漏洞
Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos Anti-Virus的Petite插件在处理手工构造的包含有大量超大扇区的Petite文档时存在漏洞，攻击者可能利用此漏洞导致反病毒引擎拒绝服务。 Sophos Anti-Virus = 6.0.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...
PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity
Exploit for unknown platform in category web applications =============================================================== PwsPHP = 1.1 themes/fin.php Remote File Include Vulnerablity ===============================================================...
PwsPHP 1.1 - '/themes/fin.php' Remote File Inclusion
========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...
[SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities
TITLE: Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA22591 VERIFY ADVISORY: http://secunia.com/advisories/22591/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Sophos Anti-Virus for Windows 6.x http://secunia.com/product/12449/ Soph...
[SA22635] Sophos Anti-Virus Petite Plugin Denial of Service Vulnerability
TITLE: Sophos Anti-Virus Petite Plugin Denial of Service Vulnerability SECUNIA ADVISORY ID: SA22635 VERIFY ADVISORY: http://secunia.com/advisories/22635/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Sophos Anti-Virus for Windows 6.x http://secunia.com/product/12449/ Soph...
Infecting Elf Binaries to Gain Local Root Exploit
No description provided by source. gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root calls the writable ls, chmod will be setuided Coded by [email protected] == [email protected] .text .global main infeccion de start para conseguir local root use ...
Clam Anti-Virus CHM解包器拒绝服务漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...
WiClear <= 0.10 (path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== WiClear = 0.10 path Remote File Include Vulnerabilities ========================================================== wiclear v0.10 Remote File Inclusion Vulnerability Found By: the...
CVE-2006-4926
The NDIS-TDI Hooking Engine, as used in the 1 KLICK KLICK.SYS and 2 KLIN KLIN.SYS device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses ...
CVE-2006-4926
The NDIS-TDI Hooking Engine, as used in the 1 KLICK KLICK.SYS and 2 KLIN KLIN.SYS device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses ...
CVE-2006-4926
CVE-2006-4926 concerns a local privilege escalation in Kaspersky Anti-Virus 6.0.0.303 related to the NDIS-TDI Hooking Engine used by the KLICK.KILIN drivers (KLICK.SYS, KLIN.SYS) v2.0.0.281. Affected components process IOCTL 0x80052110 and an invalid address in crafted IRP structures, enabling lo...
gcards.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- gcards languagefile = Remote File Include Discovered by : DeatH VirUs Dork : "powered by gcards" tasted on Version 1.13 Exploit gcards/admin/addnews.php?languagefile=shell code...
gcards (languagefile) <= Remote File Include
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- gcards languagefile = Remote File Include Discovered by : DeatH VirUs Dork : "powered by gcards" tasted on Version 1.13 Exploit gcards/admin/addnews.php?languagefile=shell code...
The concept of the rookie version of Virus writing guide there was a sense of-vulnerability warning-the black bar safety net
The first issue: the JMP ESP address the versatility issue. F. EN, in two articles have emphasized the JMP ESP opcode in the memory of the address, it version is dependent, and emphasized one more chance to put on two versions of the return code can be one more chances of success. Start your own...
CVE-2006-3454
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...
CVE-2006-3454
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...
[Full-disclosure] Hustle -- alwil Anti-Virus Kernel -- Remote & Local Vulnerability
As of 07-September-2006, Hustle Labs has released an advisory detailing a vulnerability in alwil's anti-virus kernel. This vulnerability occurs when processing specially crafted LHA files, and can be triggered through multiple attack vectors. For more information please visit...
CVE-2006-4626
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow...
CVE-2006-4626
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow...
CVE-2006-3489
F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...