papers

What this paper is This paper, titled "Path Attacks" by fred777, published in 2010, is a simple, didactic explanation of how insecure use of the function in C programs can be exploited by manipulating the environment var

What this paper is This paper details a Local File Inclusion (LFI) and potentially Remote File Inclusion (RFI) vulnerability in vbShout version 5.2.2. The vulnerability allows an attacker, with specific access levels (mo

What this paper is This paper presents a small, 18-byte shellcode routine designed to be used as part of an "egghunter" exploit. An egghunter is a piece of shellcode that searches for another, larger piece of shellcode (

What this paper is This paper details a remote stack overflow vulnerability found in the OpenSSH server (SSHD.NLM) running on Novell NetWare 6.5. It was discovered by Francis Provencher of Protek Research Lab's and publi

What this paper is This paper describes a SQL injection vulnerability in the "PHP Joke Site Software" (specifically, its parameter). The vulnerability allows an attacker to extract administrative credentials (username an

What this paper is This paper details a Denial of Service (DoS) vulnerability found in the Autodesk MapGuide Viewer ActiveX control, specifically in version 6.5. The vulnerability is triggered by sending malformed data t