BulletProof FTP客户端.bps文件处理栈溢出漏洞

BUGTRAQ ID: 33024 BulletProof FTP Server之前名为G6 FTP Server，是一款全功能的Windows平台FTP服务器软件。 如果用户受骗使用BulletProof FTP Server的客户端加载了恶意的.bps文件的话，就可能触发栈溢出，导致执行任意指令。 BulletProof FTP Client BulletProof Software -------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bpftp.com/...

Modify the shellcode XOR encryption of 0day-vulnerability warning-the black bar safety net

Author: 7i As early as the Thunderbolt came out,for the first time this technique,the original code will understand no,this 0day once again,the XOR value is 2 1,now finally decided to self-write a version of PHP,yea yeah yea... A friend asked how to find the XOR value is how much,online have a...

Chilkat Socket ActiveX SaveLastError()任意文件覆盖漏洞

BUGTRAQ ID: 32333 Chilkat socket组件为TCP/IP套接字编程提供简单易用的API。 ChilkatSocket.ChilkatSocket.1 ActiveX控件（ChilkatSocket.dll）没有正确地验证对SaveLastError方式所提供的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了恶意输入的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件。 Chilkat Software ChilkatSocket.DLL 2.3.1.1 临时解决方法： 为clsid...

Unfixed XSS vulnerability at blackboard.ocmboces.org

Security researcher JonStockton, has submitted on 20/10/2008 a cross-site-scripting XSS vulnerability affecting blackboard.ocmboces.org, which at the time of submission ranked 1288401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. ...

PHP-Fusion Mod manuals - manual SQL Injection

PHP-Fusion Mod manuals - manual SQL Injection PHP-Fusion Mod manuals manual Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++ Author : boom3rang webpage : www.khg-crew.ws greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - -=Kosova Hackers Group=- ++++++++++++++++++++++++++++ + Dork...

Gentoo Security Advisory GLSA 200501-10 (vilistextum)

The remote host is missing updates announced in advisory GLSA 200501-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Messenger Remote Illegal Access Vulnerability

CVE-2008-0082 When installing Windows XP, an old edition of MSN Messenger is installed automatically. The old edition opens the MSN API to develop as an ActiveX Control, and marks it with "safe". By using this ActiveX Control, we can control the local MSN Messenger, for instance: change state, ga...

HydraIRC远程拒绝服务漏洞

BUGTRAQ ID: 30523 CNCAN ID：CNCAN-2008080502 HydraIRC是一款IRC聊天客户端。 HydraIRC不正确处理恶意WEB页，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 HydraIRC 0.3.164 目前没有解决方案提供： http://www.hydrairc.com/ Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Worki...

HydraIrc <= 0.3.164 (last) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== HydraIrc HydraIRC Remote Denial Of Service Poc var site = 'irc://127.0.0.1/' var buf = 'A'; while buf.length 0day.today 2018-01-09...

hydralrc-dos.txt

Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : HydraIRC Remote Denial Of Service Poc var site = 'irc://127.0.0.1/' var buf = 'A...

HydraIrc 0.3.164 - Remote Denial of Service

HydraIrc 0.3.164 - Remote Denial of Service Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : HydraIRC Remote Denial Of Service Po...

CVE-2008-3129

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

BareNuked CMS 1.1.0 - Arbitrary Add Admin

!/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...

MS Internet Explorer (Print Table of Links) Cross-Zone Scripting PoC

No description provided by source. !-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in ...

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting

!-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in its “Print Table of Links” feature. This feature allows users to add to a printed web page an...

BlogWorx 1.0 - id SQL Injection

BlogWorx 1.0 - id SQL Injection BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...

blogworx-sql.txt

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

philboard1-sql.txt

Philboard W1L3D4 v1.0 Multiple SQL İnjection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

BlogWorx 1.0 - 'id' SQL Injection

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

BlogWorx 1.0 (view.asp id) Remote SQL Injection Vulnerability

No description provided by source. BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...