[UPDATE]Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
by cocoruder(frankruder@hotmail.com)
http://ruder.cdut.net, updated on 2008.05.06
Summary:
A design error vulnerability exists in Adobe Reader and Adobe Acrobat Professional. A remote attacker who successfully exploit this vulnerability can control the printer without user's permission.
Affected Software Versions:
Adobe Reader 8.1.1 and earlier versions
Adobe Acrobat Professional, 3D and Standard 8.1.1 and earlier versions
Details:
This vulnerablity due to the design error of the javascript fucntion "DOC.print()", following are the annotates of the function in Adobe's Javascript API Reference(named "js_api_reference.pdf"):
阅读全文 »
Tags: Adobe,
Adobe Acrobat,
Adobe Reader,
Advisory,
Vulnerability
来源：Ph4nt0m Google Group
by Flyh4t@126.com
QQ:378367942
\include\inc_bookfunctions.php
---------------------------------------------------
……
function WriteBookText($cid,$body)
{ 阅读全文 »
Tags: DedeCms,
Vulnerability
官方已经修正该漏洞。
--==+=================== www.nspcn.org =================+==--
--==+ OBlog (tags.asp) Remote SQL Injection Exploit +==--
--==+====================================================================================+==--
#Author: Whytt & Tr4c3[at]126[dot]com
#版权所有:http://www.nspcn.org & [BK瞬间群] & Whytt
#漏洞文件tags.asp
阅读全文 »
Tags: Exploit,
OBlog,
SQL Injection,
Vulnerability,
注入,
漏洞
by cocoruder(frankruder@hotmail.com)
http://ruder.cdut.net
Summary:
More than three local code execute vulnerabilities exist in Adobe Flash CS3 Professional while it is parsing FLA files. An attacker who successfully exploit these vulnerabilities can run arbitrary code on the affected system.
Affected Software Versions:
Adobe Flash CS3 Professional 9.0
阅读全文 »
Tags: Adobe,
Flash,
Vulnerability
============================================
首发http://www.nspcn.org ，转载请保留此处版权
============================================
漏洞发布:Tr4c3[at]126[dot]Com
影响版本 BBSxp 2008 (Build: 8.0.4)其他版本未看
漏洞文件:MoveThread.asp
MoveThread.asp行2-24
阅读全文 »
Tags: BBSXP,
SQL Injection,
Vulnerability,
漏洞
来源：alert7 blog
以前在焦点BLOG上写的小东西
软件的bug有多种多样,在我看来,只要是违反软件意图的行为都可以视为bug,当然bug的严重性也分三六九等,有直接crash的,有内存泄漏的,有功能性的,有逻辑性的,有界面显示问题的......
vulnerability中文翻译为弱点,一般人所说的漏洞.
那些能引起弱点(vulnerability)的bug,我们称软件有该bug的vulnerability.
那么,何为能引起弱点(vulnerability)的bug??
这里是指能利用(exploit)这个bug,可以做一些危害系统.危害系统的使用者的这么一些bug.例如权限提升,CSS拿别人的cookie进别人的邮件系统,sql注入改数据库等等.
阅读全文 »
Tags: Bug,
Vulnerability
