papers

What this paper is This paper, published by David Hoyt in October 2010, details multiple vulnerabilities found in Plesk Small Business Manager (PSBM) version 10.2.0 and its associated Site Editor. The primary vulnerabili

What this paper is This paper details a local stack overflow vulnerability in the plugin for Winamp version 5.5.8.2985. The exploit provided aims to overwrite the program's execution flow, leading to the execution of arb

What this paper is This paper details a method for achieving root privileges on vulnerable Debian and Ubuntu systems (specifically versions prior to Debian 5.0.6 and Ubuntu 10.04). It leverages a vulnerability in the GNU

What this paper is This paper details a Cross-Site Request Forgery (CSRF) vulnerability in the Jamb Content Management System (CMS). Specifically, it demonstrates how an attacker can trick a logged-in administrator into

What this paper is This paper details a SQL Injection vulnerability found in DBHcms version 1.1.4. The author, ZonTa, discovered that by manipulating the parameter in the script, an attacker could inject malicious SQL co

What this paper is This paper, published by Th3 RDX in October 2010, details a Persistent Cross-Site Scripting (XSS) vulnerability found in Pulse Pro version 1.4.3. A persistent XSS vulnerability means that malicious scr