Exploits [Archive] - CITEC Forum

[MW] BigAnt Server (0 replies)
[MW] Joomla com_mytube (user_id) Blind SQL Injection Exploit (0 replies)
[MW] Joomla com_jinc (newsid) Blind SQL Injection Vulnerability (0 replies)
[MW] Snort < 2.8.5 Unified1 Output Denial of Service Exploit (0 replies)
[MW] WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities (0 replies)
[MW] Loggix Project (0 replies)
[MW] ProdLer (0 replies)
[MW] CMScontrol 7.x (index.php id_menu) SQL Injection Vulnerability (0 replies)
[MW] cP Creator 2.7.1 (Cookie tickets) Remote SQL Injection Exploit (0 replies)
[MW] Winplot (.wp2 File) Local Buffer Overflow Exploit (0 replies)
Apple iTunes ColorSync Profile Integer Overflow Vulnerability (0 replies)
HP Performance Insight Remote Execution of Arbitrary Commands Vulnerability (0 replies)
Apache mod_isapi Dangling Pointer Vulnerability (0 replies)
ncpfs Package ncpmount, ncpumount and ncplogin Multiple Vulnerabilities (0 replies)
Juniper Secure Access Cross Site Scripting Vulnerability (0 replies)
Authentium Command On Demand ActiveX Control Buffer Overflow Vulnerability (0 replies)
Skype URI Handler Input Validation Vulnerability (0 replies)
Employee Timeclock Software Backup Information Disclosure (0 replies)
GNU Tar and GNU Cpio Heap Based Buffer Overflow Vulnerability (0 replies)
Microsoft Office Excel Record Processing Code Execution Vulnerability (0 replies)
Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability (0 replies)
Microsoft Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow (0 replies)
Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability (0 replies)
Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability (0 replies)
Cisco Digital Media Manager Privilege Escalation Vulnerability (0 replies)
Cisco Digital Media Manager Privilege Escalation Vulnerability (0 replies)
VMWare vMA and ESX Service Console Expat Buffer Over-read Vulnerabilities (0 replies)
Cisco Digital Media Manager Default Credentials Vulnerability (0 replies)
McAfee LinuxShield Code Execution Vulnerability (0 replies)
VMWare vMA and ESX Service Console NTPD Packet Reply Loop Vulnerability (0 replies)
VMWare vMA and ESX Service Console GLib Multiple Integer Overflow Vulnerabilities (0 replies)
IBM Informix librpc.dll Multiple Code Execution Vulnerabilities (0 replies)
Bournal ccrypt Information Disclosure Security Issue (0 replies)
Luxology Modo 401 .LXO Integer Overflow Vulnerability (0 replies)
DATEV DVBSExeCall ActiveX Control Command Execution Vulnerability (0 replies)
Symantec Products SYMLTCOM.dll Buffer Overflow Vulnerability (0 replies)
Multiple Vendor librpc.dll Signedness Error Code Execution Vulnerability (0 replies)
Xerox WorkCentre Printers Web Interface Backdoor and other Vulnerabilities (0 replies)
Cisco ASA 5500 Series Adaptive Security Appliances Multiple Vulnerabilities (0 replies)
Microsoft Windows URL Handling Vulnerability (0 replies)
Google Chrome Password Manager Cross Origin Weakness (0 replies)
Portwise SSL VPN Cross Site Scripting Vulnerability (0 replies)
Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability (0 replies)
Asterisk Dialplan Injection Vulnerability (0 replies)
Symantec Antivirus 10.0 ActiveX Buffer Overflow Vulnerability (0 replies)
HP ProLiant Support Pack 8.30 for Windows Vulnerabilities (0 replies)
Microsoft Windows SMB NTLM Authentication Weak Nonce Vulnerability (0 replies)
HP-UX Remote Privilege Escalation and Denial of Service Vulnerabilities (0 replies)
HP Operations Agent Running on Solaris 10 Remote Unauthorized Access vulnerability (0 replies)
Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability (0 replies)
Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability (0 replies)
Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability (0 replies)
Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability (0 replies)
NOS Microsystems getPlus Downloader Input Validation Vulnerability (0 replies)
Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability (0 replies)
Mozilla Bugzilla Multiple Vulnerabilities (0 replies)
Real Networks RealPlayer Compressed GIF Handling Integer Overflow (0 replies)
RealNetworks RealPlayer 11 HTTP Chunked Encoding Vulnerability (0 replies)
RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability (0 replies)
HP OpenVMS RMS Local Escalation of Privilege (0 replies)
Asterisk T.38 Remote Crash Vulnerability (0 replies)
HP-UX running HP CIFS Server Remote Unauthorized Access (0 replies)
SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability (0 replies)
Apple WebKit HTML Element Use After Free Vulnerability (0 replies)
Microsoft Virtual PC Hypervisor Memory Protection Vulnerability (0 replies)
Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability (0 replies)
Dojo Toolkit SDK Multiple DOM-Based XSS Vulnerabilities (0 replies)
SugarCRM Online Document Cross-Site Scripting (XSS) Vulnerability (0 replies)
Skype URI Processing Arbitrary XML File Deletion Vulnerability (0 replies)
Skype Protocol Handler Datapath Argument Injection Credential Disclosure Vulnerability (0 replies)
Apple WebKit CSS Run-in Attribute Rendering Vulnerability (0 replies)
Publique! CMS and SQL Injection Vulnerabilities (3 replies)
LedgerSMB Multiple Vulnerabilities (3 replies)
Files2Links F2L-3000 SQL Injection Vulnerability (3 replies)
HP-UX Running Apache Data Injection and DoS Vulnerability (3 replies)
Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability (3 replies)
Trango Broadband Wireless Rogue SU Authentication Bug (4 replies)
MIT krb5 KDC denial of service in cross-realm referral processing (4 replies)
Exposing HMS HICP Protocol and Intellicom NetBiterConfig.exe Remote Buffer Overflow (4 replies)
AproxEngine Multiple Vulnerabilities (4 replies)
APC Switched Rack PDU XSS Vulnerability (4 replies)
HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service (4 replies)
HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service (0 replies)
Family Connections Multiple Remote Vulnerabilities (4 replies)
VideoCache vccleaner Root Vulnerability (4 replies)
QuickHeal Antivirus 2010 Local Privilege Escalation (4 replies)
DubSite CMS Cross Site Request Forgery Vulnerability (4 replies)
Sonicwall NSA E7500 XSS Vulnerability (4 replies)
SonicWall Global Management System XSS Vulnerability (4 replies)
Juniper Security Threat Response Manager XSS Vulnerability (4 replies)
HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability (4 replies)
Piwik Cookie Unserialize Vulnerability (4 replies)
Microsoft Indeo Codec Memory Corruption Vulnerability (4 replies)
HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability (4 replies)
HP-UX Running VRTSweb Remote Execution of Arbitrary Code and Privilege Escalation (4 replies)
Invision Power Board SQL PHP File Inclusion and SQL Injection (4 replies)
FreeBSD SSL and TLS Session Renegotiation vulnerability (4 replies)
U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) Vulnerability (4 replies)
DevIL DICOM Buffer Overflow Vulnerability (4 replies)
CoreHTTP Web Server Buffer Overflow Vulnerability (4 replies)
HP OpenView Network Node Manager DoS Vulnerability (4 replies)
ToutVirtual VirtualIQ Multiple Vulnerabilities (0 replies)
Transport Layer Security Renegotiation Vulnerability (0 replies)
HP Data Protector Express and Single Server Edition (SSE) DoS and Code Execution (0 replies)
Marvell Driver Multiple Information Element Overflows (0 replies)
Cute News and UTF-8 Cute News Multiple Vulnerabilities (0 replies)
HP Color LaserJet Printers Unauthorized Access to Data and DoS (0 replies)
KDE KDELibs Remote Array Overrun with Arbitrary Code Execution (0 replies)
PHP Multipart/Form-data Denial of Service Attack (0 replies)
HP Operations Manager for Windows Unauthorized Access (0 replies)
Norton Alteon OS Browser-Based Interface XSS and XSRF Vulnerabilities (0 replies)
RhinoSoft Serv-U TEA Decoding Buffer Overflow (0 replies)
Cisco Catalyst Blade Switch 3020/3120 DoS Vulnerability (0 replies)
McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability (0 replies)
Gimp BMP Image Parsing Integer Overflow Vulnerability (0 replies)
Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation (0 replies)
HP-UX Running BIND DoS (0 replies)
Gimp PSD Image Parsing Integer Overflow Vulnerability (0 replies)
HP Power Manager Execution of Arbitrary Code (0 replies)
HP DDMI Execution of Arbitrary Code (0 replies)
WordPress Unrestricted File Upload Arbitrary PHP Code Execution (0 replies)
Microsoft Windows License Logging Service Heap Corruption Vulnerability (0 replies)
McAfee Security Manager Authentication Bypass and Session Hijacking Vulnerability (0 replies)
Atheros Driver Reserved Frame DoS Vulnerability (0 replies)
Microsoft Office Excel Code Execution Vulnerabilities (0 replies)
IBM Tivoli Storage Manager CAD Service Buffer Overflow (0 replies)
Adobe Shockwave Player Multiple Code Execution Vulnerabilities (0 replies)
HP-UX Using libc DoS Vulnerability (0 replies)
Novell eDirectory LDAP Null Base DN DoS Vulnerability (0 replies)
Microsoft SharePoint 2007 ASP.NET Source Code Disclosure (0 replies)
Hyperic HQ XSS Alerts List Vulnerability (0 replies)
Hyperic HQ Reflected XSS in Stack Trace (0 replies)
Palm Pre WebOS Remote File Access Vulnerability (0 replies)
Android Malformed SMS and Dalvik API DoS Vulnerabilities (0 replies)
VMware Mishandled Exception and Directory Traversal Vulnerabilities (0 replies)
Aruba Networks Malformed 802.11 Association Request DoS Vulnerability (0 replies)
Oracle Database PL/SQL Injection Vulnerability (0 replies)
Asterisk ACL check Vulnerability (0 replies)
F-Secure Generic PDF bypass (0 replies)
Rising Multiple Products Local Privilege Escalation Vulnerability (0 replies)
KDE Multiple Vulnerabilities (0 replies)
McAfee generic PDF detection bypass (0 replies)
Mozilla Firefox Floating Point Memory Allocation Vulnerability (0 replies)
Mozilla Firefox GIF Color Map Parsing Buffer Overflow Vulnerability (0 replies)
TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities (0 replies)
vBulletin Cross Site Scripting Vulnerability (0 replies)
Avast! Local Privilege Escalation and DoS Vulnerabilities (0 replies)
Poppler and Xpdf Integer Overflow Vulnerability (0 replies)
OSSIM Multiple Vulnerabilities (0 replies)
Microsoft Windows ActiveX Indexing Service Memory Corruption Vulnerability (0 replies)
Windows Kernel Multiple Vulnerabilities (0 replies)
Microsoft Windows Local Security Authority Integer Overflow Vulnerability (0 replies)
Windows CryptoAPI Null Truncation and Integer Overflow Vulnerabilities (0 replies)
Microsoft IIS FTP Service Code Execution and DoS Vulnerability (0 replies)
Microsoft GDI+ Multiple Vulnerabilities (0 replies)
Microsoft .NET Common Language Runtime Multiple Vulnereabilities (0 replies)
Microsoft Active Template Library ActiveX Controls Multiple Vulnerabilities (0 replies)
ActiveX Active Template Library Initialization Vulnerability (0 replies)
Internet Explorer Multiple Remote Code Execution Vulnerabilities (0 replies)
Windows Media Player ASF File Remote Code Execution (0 replies)
Windows Media Runtime Remote Code Execution (0 replies)
Windows Vista and Windows Server 2008 SMBv2 Remote Code Execution (0 replies)
Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability (0 replies)
Cisco Unified Communications Manager Express Vulnerability (0 replies)
HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access (0 replies)
TrustPort Antivirus and PC Security Privilege Escalation Vulnerability (0 replies)
FlatPress FP-includes Remote Command Execution Vulnereability (0 replies)
Adobe Photoshop Elements Active File Monitor Service Local Elevation Of Privileges (0 replies)
Flickr API Authentication Hash Extension Attack (0 replies)
OSISoft PI Server Authentication Weakness (0 replies)
Novell NetWare NFS Portmapper and RPC Module Stack Overflow Vulnerability (0 replies)
HP-UX Running Kerberos Denial of Service and Execution of Arbitrary Code (0 replies)
Quiksoft EasyMail imap onnect() ActiveX Stack Overflow Exploit (0 replies)
RADactive I-Load Multiple Vulnerabilities (0 replies)
HP-UX Running bootpd, Remote Denial of Service Vulnerability (0 replies)
Iret Pre-commit Handling Failures With Notes On NetBSD Privilege Elevation (0 replies)
Protector Plus Local Privilege Escalation Vulnerability (0 replies)
Apple iPhone OS AudioCodecs Heap Buffer Overflow (0 replies)
Novell eDirectory Dhost Http Server Denial of Service Vulnerability (0 replies)
Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability (0 replies)
Apple QuickTime FlashPix Sector Size Overflow Vulnerability (0 replies)
Mozilla Firefox TreeColumns Dangling Pointer Vulnerability (0 replies)
Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote System Crash (0 replies)
Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server (0 replies)
VMWare VMnc Codec Mismatched Dimensions Buffer Overflow (0 replies)
ChartDirector for .NET File Access Vulnerability (0 replies)
Microsoft Internet Explorer JScript arguments Invocation Memory Corruption (0 replies)
Microsoft Windows XP/Vista TCP/IP Orphaned Connections Vulnerability (0 replies)
Orion Application Server Example Pages XSS Vulnerability (0 replies)
ChartDirector for .NET File Access Vulnerability (0 replies)
VMware Frame Buffer Parameter Heap-Based Buffer Overflow Vulnerability (0 replies)
yTNEF/Evolution TNEF Attachment Decoder Plugin Multiple Vulnerabilities (0 replies)
Asterisk IAX2 Call Number Resource Exhaustion (0 replies)
Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server (0 replies)
OpenOffice.org Word Document Table Parsing Integer Underflow (0 replies)
Microsoft ATL/MFC ActiveX Security Bypass Vulnerability (0 replies)
Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability (0 replies)
JSFTemplating Mojarra Scales and GlassFish Application Server File Disclosure Vulnerability (0 replies)
Microsoft IIS FTP Server Stack Based Overrun Vulnerability (0 replies)
Xerox WorkCentre LPD daemon Denial of Service (0 replies)
Microsoft ATL/MFC ActiveX Type Confusion Vulnerability (0 replies)
Subdreamer CMS SQL Injection Vulnerabilities (0 replies)
ProShow Gold Buffer Overflow Vulnerabilities (0 replies)
Oracle Database Server Resource Manager Buffer Overflow (0 replies)
Open Auto Classifieds SQL Injection XSS and Filepath Disclosure (0 replies)
Adobe Flex 3.3 SDK DOM-Based XSS (0 replies)
Microsoft Office Web Components 2000 Buffer Overflow Vulnerability (0 replies)
Cisco Unified Communications Manager Denial of Service Vulnerabilities (0 replies)
Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability (0 replies)
Radvision Scopia Cross Site Scripting Vulnerabilities (0 replies)
ScribeFire Firefox Extension Code Injection Vulnerability (0 replies)
Cisco Firewall Services Module Denial of Serevice Vulnerability (0 replies)
VMware libpng and Apache HTTP Server Arbitrary Code and DOS vulnerability (0 replies)
Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities (0 replies)
Pidgin and Adium Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability (0 replies)
CA Host-Based Intrusion Prevention System Denial of Service (0 replies)
CA Internet Security Suite vetmonnt.sys Denial Of Service (0 replies)
Piwigo SQL Injection Vulnerability (0 replies)
Snom VoIP/SIP Phone Authentication Bypass of Web Interface (0 replies)
Microsoft Office OWC10.Spreadsheet ActiveX Heap Corruption Vulnerability (0 replies)
Microsoft Office OWC10 ActiveX Control Heap Corruption Vulnerability (0 replies)
Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability (0 replies)
Microsoft Office msDataSourceObject() Heap Corruption Vulnerability (0 replies)
Microsoft Workstation Service Heap Corruption Vulnerability (0 replies)
Microsoft Internet Explorer Memory Corruption Vulnerability (0 replies)
Sun Java Pack200 Decoding Overflow Vulnerability (0 replies)
SlideShowPro Director File Disclosure Vulnerability (0 replies)
Oracle Enterprise Manager SQL Injection Vulnerability (0 replies)
HP-UX Running IPFilter Remote Denial of Service (0 replies)
Fetchmail Improper SSL Certificate Subject Verification (0 replies)
Palm Pre WebOS Execution of Arbitrary Code (0 replies)
Adobe Flash Player Integer Overflow Code Execution (0 replies)
Asterisk Open Source Crash Vulnerability in RTP stack (0 replies)
Firebird SQL op_connect_request main listener shutdown vulnerability (0 replies)
FreeBSD BIND named(8) Dynamic Update Message Denial of Service Vulnerability (0 replies)
Cisco Using Microsoft Active Template Libraries Vulnerability (0 replies)
HP ProLiant DL/ML 100 Series G5 G6 Servers Remote Denial of Service (0 replies)
Cisco IOS Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities (0 replies)
HP-UX Running Kerberos Denial Of Service And Execution Of Arbitrary Code (0 replies)
Joomla! Multiple Full Path Disclosure Vulnerabilities (0 replies)
Cisco Wireless LAN Controllers Multiple Vulnerabilities (0 replies)
Drupal 6 Date and Calendar XSS Vulnerability (0 replies)
mChek 3.4 Information Disclosure (0 replies)
Phorum Cross-Site Scripting Vulnerabilities (0 replies)
Apple iPhone Arbritary Code Execution (0 replies)
Akamai Download Manager Execution of Arbitrary Code (0 replies)
Hacking CSRF Tokens using CSS History Hack (0 replies)
Oracle Secure Enterprise Search Linked XSS Vulnerability (0 replies)
Mobile Rediff Username and Password Disclosure (0 replies)
Microsoft Office Publisher 2007 Arbitrary Pointer Dereference Vulnerability (MS09-030) (0 replies)