Python socket.recvfrom_into() - Remote Buffer Overflow

No description provided by source. !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-1912...

CVS 1.11.x Directory Request Double Free Heap Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6650/info CVS is prone to a double free vulnerability in the Directory requests. An attacker may potentially take advantage of this issue to cause heap memory to be corrupted with attacker-supplied values, which may resul...

Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute

No description provided by source. Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute Date: 2011-5-27 Discovered by: boahat vendor: http://www.magnetosoft.com/ Download: http://www.magnetosoft.com/downloads/skicmpsetup.exe SKIcmp.ocx Function ICMPSendEchoRequest ByVal...

Kolibri <= 2.0 - HTTP Server HEAD Buffer Overflow

No description provided by source. $Id: kolibrihttp.rb 10887 2011-08-03 12:19:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Netrw 125 Vim Script Multiple Command Execution Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute...

SDL_image 1.2.6 Invalid GIF File LWZ Minimum Code Size Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attacker...

libxslt 1.1.x - RC4 Encryption and Decryption Functions Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute...

BlazeDVD Pro Player 6.1 - Stack Based Buffer Overflow Jump ESP

No description provided by source. Exploit-DB Note: XPSP3 - my $eip = pack'V',0x7c868667; jmp ESP on kernel32.dll Date: Tue Apr 8 2014 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version: 6.1 Tested on: Windows...

VWD-CMS - CSRF Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ Title : VWD-CMS CSRF Vulnerability Affected Version : VWD-CMS version 2.1 Discovery : www.abysssec.com Vendor : http://www.vwd-cms.com/ Demo...

ProShow Gold 4.0.2549 - (PSH File) Stack Buffer Overflow

No description provided by source. $Id: proshowcellimagebof.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Joomla Component com_menu SQL Injection Vulnerability

No description provided by source. Title : Joomla Component commenu SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-02 InformatioN Title : Joomla Component commenu SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected]...

Joomla Component com_ops SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comops SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-02 InformatioN Title : Joomla Component comops SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected]...

Joomla Component com_network SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comnetwork SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Joomla Component comnetwork SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...

Joomla Component com_trading Blind SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comtrading Blind SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Joomla Component comtrading Blind SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...

Joomla Component com_items SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comitems SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-29 InformatioN Title : Joomla Component comitems SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected]...

Joomla Component com_actions SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comactions SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-29 InformatioN Title : Joomla Component comactions SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...

Joomla Component com_television SQL Injection Vulnerability

No description provided by source. Title : Joomla Component comtelevision SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-29 InformatioN Title : Joomla Component comtelevision SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...

TFTPUtil GUI 1.4.5 - DoS (Meta)

No description provided by source. Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit...

Bontago Game Server 1.1 - Remote Nickname Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12603/info The Bontago game server is reported to be affected by a remote buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on client-supplied 'nickname'...

PHP <= 5.3.1 - LCG Entropy Security Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38430/info PHP is prone to a security vulnerability that affects LCG Linear Congruential entropy. Attackers can exploit this issue to steal sessions or other sensitive data. Versions prior to PHP 5.2.13 are affected...