Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

This module exploits a stack based buffer overflow found in Cytel Studio use exploit/windows/fileformat/cytel/studiocy3 msf undefinedstudiocy3 show actions ...actions... msf undefinedstudiocy3 set ACTION msf undefinedstudiocy3 show options ...show and set options... msf undefinedstudiocy3 run Thi...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow Exploit Title：UUSEE ActiveX shellcode = unescape“%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800″ + “%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u1074%u0A6A” + “%u858D%u0114%u0000%uFF50%u0695%u0001%u6100%uC031%uC489%uC350″ +...

DSA-2226-1 libmodplug - buffer overflow

Bulletin has no description...

IDEAL Administration 2011 11.4 - Local Buffer Overflow (SEH)

IDEAL Administration 2011 11.4 - Local Buffer Overflow SEH !/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, anothe...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...

Cross site scripting

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

CVE-2010-3931

The CVE-2010-3931 entry corresponds to a cross-site scripting (XSS) vulnerability in multiple Rocomotion products (e.g., P board, P forum, P up board, P diary R, P link, pplog/pplog2, PM bbs/PM forum) across listed versions (e.g., P board 1.18 and earlier, P forum 1.30 and earlier, P up board 1.3...

Cross-site scripting vulnerability in multiple Rocomotion products

Overview Multiple products provided by Rocomotion contain a cross-site scripting vulnerablility. Multiple products P board etc. provided by Rocomotion contain a cross-site scripting vulnerablility. Saeki Tominaga of KINOTROPE INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

ZyXEL P-660R-T1 crossite scripting

Crossite scripting via Web interface...

ZYXEL P-660R-T1 V2 - HomeCurrent_Date Cross-Site Scripting

ZYXEL P-660R-T1 V2 - HomeCurrentDate Cross-Site Scripting source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

ZYXEL P-660R-T1 V2 - 'HomeCurrent_Date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting us...

ZyXEL P-660R-T1 V2 Cross Site Scripting

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...

CVE-2010-2016

SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

Design/Logic Flaw

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...