Creative Software AutoUpdate Engine - ActiveX Stack Overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...

SunShop Version 3.5.1 Remote Blind Sql Injection

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "rn+-----------------------------------------+rn"; print "+Bli...

php-addressbook v2.0 Multiple Remote Vulnerabilities (LFI/XSS)

---------------------------------------------------------------- Script : php-addressbook v2.0 Type : Multiple Remote Vulnerabilities LFI/XSS ---------------------------------------------------------------- Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani...

Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql...

S21SEC-041-en:Cezanne SW Cross-Site Scripting

S21Sec Advisory - Title: Cezanne SW Cross-Site Scripting ID: S21SEC-041-en Severity: Medium History: 02.Jan.2008 Vulnerability discovered Authors: Juan de la Fuente Costa [email protected] Fco Javier Puerta Rubio [email protected] URL: http://www.s21sec.com/avisos/s21sec-41-en.txt SUMMARY...

mumbojumbo-sql.txt

php '.$argv0.' http://www.site.com/cms/ 300 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?id='.$argv2.'+and+lengthselect+kennung+from+op4admin+where+id='.$argv3.'='.$i.'--'; if strpos$temp1,'Die angeforderte Seite existie...

XM Easy Personal FTP Server 5.4.0 (XCWD) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.4.0 XCWD Denial of Service Exploit ================================================================== !/usr/bin/python XM Easy Personal FTP Server...

nuBoard 0.5 - 'ssid' SQL Injection

Nuboardv0.5 SQL Injection Vulnerability By IRCRASH AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboardv0.5.tar.gz SQL Address :...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Music Jukebox 2.2 AddButton ActiveX Remote BOF Exploit 3 =================================================================== Yahoo! JukeBox datagrid.dll AddButton...

Cisco Phone 7940 - Remote Denial of Service

Cisco Phone 7940 - Remote Denial of Service !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; die "Usage $0 "...

CA BrightStor HSM r11.5 - Remote Stack Overflow / Denial of Service

!/usr/bin/perl C@@@@@ O@@@@@@@ C@@@@@ O@@@@@@O C@@@@@@@@@o C@@@@@@@@@@@@@@@@O C@@@@@@@@@@@@@@@@O C@@@@@@@@@@@@@o C@@@@@@o .8@@@@@@. C@@@@@@o 8@@@@@@. @@@@@@O .@@o C@@@@@ @@@@@@c C@@@@@ @@@@@@c C@@@@@c C@@@@@ O@@@@@: C@@@@@ O@@@@@: @@@@@@ C@@@@@ O@@@@@: C@@@@@ O@@@@@: 8@@@@@ C@@@@@ O@@@@@: C@@@@@...

safari_libtiff.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

Say a covert clone account method-vulnerability warning-the black bar safety net

Vulnerability discovery date 0 to 5 years a month Note: because of the recent how not concern of network security by memory, looks like nobody told you this method so put out the Do not shoot the bricks I thx you! The principle is very simple Ah sam FV key value. focus on how to avoid detection...

GForge 4.6b2 - skill_delete SQL Injection

GForge 4.6b2 - skilldelete SQL Injection Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for...

Marshal MailMarshal TAR Unpacking Vulnerability

Marshal MailMarshal TAR Unpacking Vulnerability Overview -------- Vendor: Marshal www.marshal.com Product: MailMarshal = 6.2.1.3253 Vulnerability: Remote file overwrite, Remote execution Risk: HIGH Description ----------- During a security audit for a customer we have discovered a serios...

Arcadem 2.01 - SQL Injection Remote File Inclusion

Arcadem 2.01 - SQL Injection Remote File Inclusion Arcadem Remote File Inclusion Flaw / SQL Injection Software: Arcadem 2.01 Vendor link: http://agaresmedia.com Attack: Remote File Inclusion / SQL Injection Original advisory: http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.htm...

bwired - 'index.php?newsID' SQL Injection

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I will not go into.. The admin hash will be...

MKPortal NoBoard Module (Beta) - Remote File Inclusion

MKPortal NoBoard Module Beta - Remote File Inclusion / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title MKPortal NoBoard BETA Script Download...

FlashGameScript <= 1.7 (user) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FlashGameScript = 1.7 user Remote SQL Injection Vulnerability ================================================================ FlashGameScript = 1.7 member.php$user...