1691 matches found
VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability
VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Acrobat and Reader are the global standards for electronic document sharing. They are used to create, view, search,...
SuSE Security Summary SUSE-SR:2009:014
The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
Traidnt UP 2.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================== Traidnt UP 2.0 Remote SQL Injection Exploit =========================================== !/usr/bin/ruby ============================================= Traidnt UP v2.0 Exploit SQL Injection...
OpenGoo 1.1 - Local File Inclusion
OpenGoo 1.1 - Local File Inclusion OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18...
Vinagre < 2.24.2 - 'show_error()' Remote Format String (PoC)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory ID: CORE-2008-1127 Advisory URL:...
FreeForum 0.9.7 (fpath) Remote File Include Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FreeForum 0.9.7 fpath Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish hacker...
rubronegrodotnet.txt
Author: Rephumos Date: 22.feb.2006 URL: http://www.rubronegro.net --- Description: Rubronegro.net is a fansite for the brazilian soccer team Atlético Paranaense. --- Vulnerability - Cross scripting: Website has a cross site scripting issue, taken from the code below: $temp = $path."/".$link;...
Remote IIS 5.x and IIS 6.0 Server Name Spoof
Remote IIS 5.x and IIS 6.0 Server Name Spoof It is possible to remotely spoof the "SERVERNAME" Microsoft® Internet Information Server® 5.0, 5.1 and 6.0 server variable by doing a modified HTTP request. Thus potentially revealing sensitive ASP code through the IIS 500-100.asp error page, the spoof...
HP-UX PHNE_30090 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)
s700800 11.23 libnsl cumulative patch : A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Instaboard 1.3 SQL Injection
Affected Product: NetPleasure's Instaboard 1.3 www.netpleasure.com/instaboard/ Venerability: Multiple SQL Injection Vunerabilities. http://server/instaboard/index.cfm?frmid=120AND20u.userid20IN20select20userid20from20users http://server/instaboard/index.cfm?frmid=1&tpcid=120SQL...
