papers

What this paper is This paper details a local privilege escalation vulnerability in ZipWrangler version 1.20. Specifically, it describes a Stack-based buffer overflow that can be triggered by a specially crafted file. Th

What this paper is This paper details a vulnerability in HP's Digital Imaging software, specifically within the component. The exploit leverages an insecure method within this DLL to allow an attacker to write arbitrary

What this paper is This paper, published by cr4wl3r on April 24, 2010, details a vulnerability in Openfoncier version 2.00. The vulnerability allows for both Remote File Inclusion (RFI) and Local File Inclusion (LFI) att

What this paper is This paper, published by cr4wl3r on April 24, 2010, details two critical vulnerabilities found in Openplanning version 1.00. These vulnerabilities are: Remote File Inclusion (RFI): Allows an attacker t

What this paper is This paper describes a Local File Inclusion (LFI) vulnerability in Openpresse version 1.01. LFI vulnerabilities occur when a web application uses user-supplied input to construct file paths without pro

What this paper is This paper details several vulnerabilities found in LaNewsFactory, a news management system that does not require a database. The vulnerabilities, discovered by Salvatore Fresta, allow unauthenticated