papers

What this paper is This paper details two vulnerabilities found in "Max's Guestbook 1.0," a web application. The vulnerabilities are: HTML Injection: Allows an attacker to inject arbitrary HTML code into the guestbook en

What this paper is This paper describes a vulnerability in vBulletin versions 3.8.4 and 3.8.5 that allows an attacker to bypass the registration process and create a username that is identical to an existing administrato

What this paper is This paper is a Proof-of-Concept (PoC) exploit for a buffer overflow vulnerability in SnackAmp version 3.1.2. When SnackAmp attempts to process a specially crafted '.wav' file, it overflows a buffer, l

What this paper is This paper details a security vulnerability in SnackAmp version 3.1.2, a media player. Specifically, it describes a buffer overflow vulnerability that can be triggered by a specially crafted file. The

What this paper is This paper details a heap corruption vulnerability in Nginx versions 0.6.38 and earlier, and 0.7.61 and earlier. The vulnerability, identified as CVE-2009-2629, allows for local privilege escalation by

What this paper is This paper describes a vulnerability in CF Image Hosting Script version 1.3. The vulnerability allows an attacker to access a file named directly through a web browser. This file likely contains sensit