WinSmMuPl 1.2.5 - '.mp3' Local Crash (PoC)

!/usr/bin/perl WinSmMuPl 1.2.5 .mp3 Local Crash PoC + Discovered By: cr4wl3r print "\n"; print "! WinSmMuPl 1.2.5 .mp3 Local Crash PoC\n"; print "\n"; print "! By: cr4wl3r\n"; print "\n"; my $boom = "A" x 1337; my $filename = "sploit.mp3"; open FILE,"$filename"; print FILE "$boom"; print...

WinSmMuPl 1.2.5 (.mp3) Local Crash PoC

Exploit for unknown platform in category local exploits ====================================== WinSmMuPl 1.2.5 .mp3 Local Crash PoC ====================================== !/usr/bin/perl WinSmMuPl 1.2.5 .mp3 Local Crash PoC 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except:...

Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow

No description provided by source. Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " host"...

CVE-2010-0636

Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the 1 tab parameter to users.php and the PATHINFO to 2 day.php, 3 month.php, and 4 week.php. NOTE: some of these details are...

Wireshark 1.2.5 LWRES getaddrbyname stack BOF

Exploit for unknown platform in category dos / poc ============================================= Wireshark 1.2.5 LWRES getaddrbyname stack BOF ============================================= !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over E...

Mandriva Update for wireshark MDVSA-2010:016 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2010:016 wireshark Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Sql injection

SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/...

CVE-2009-4566

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass2 parameters in a saveoptions action...

CVE-2009-4562

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the from parameter...

CVE-2009-4563

Cross-site request forgery CSRF vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass2 parameters in a saveoptions action...

CVE-2009-4562

CVE-2009-4562 is an XSS vulnerability in Zenphoto 1.2.5, specifically in zp-core/admin.php, allowing remote attackers to inject arbitrary web script or HTML via the from parameter. The connected documents corroborate the same flaw in Zenphoto 1.2.5 and note related variants (e.g., CVE-2010-4907 d...

CVE-2009-4564

Zenphoto 1.2.5 (with the ZenPage plugin enabled) is affected by an SQL injection in index.php via the category parameter in the news/category/ URI. This allows remote attackers to run arbitrary SQL commands against the application's database. The vulnerability arises from improper handling of the...

Wireshark SMB Dissectors Denial of Service Vulnerability - Linux

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark 1.2.5版本修复多个安全漏洞

BUGTRAQ ID: 37407 CVE ID: CVE-2009-4376,CVE-2009-4377,CVE-2009-4378 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的Daintree SNA文件解析器中存在缓冲区溢出漏洞，IPMI、SMB和SMB2协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的报文或读取了恶意抓包文件的话，就会导致解析模块崩溃或执行任意代码。 Wireshark 0.9.0 - 1.2.4 厂商补丁： Wireshark ---------...

CVE-2009-3801

OpenDocMan 1.2.5 is affected by a SQL injection in index.php triggered through the frmpass parameter, enabling remote attackers to execute arbitrary SQL commands. This is corroborated by multiple sources in the connected set (NVD entry and OpenVAS/Red Hat redundancy). Root cause centers on improp...

CVE-2009-3789

Multiple cross-site scripting XSS vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the lastmessage parameter to 1 add.php, 2 toBePublished.php, 3 index.php, and 4 admin.php; the PATHINFO to the default URI to 5 category.php, 6 department.php, 7...

OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...