Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)

Exploit for windows platform in category local exploits Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link:...

Mini-Stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

CVE-2012-1328

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 are affected by a code/injection vulnerability in the handling of configuration data downloads to an RT phone, allowing local users to gain privileges via injected data (Bug ID CSCts32237). The issue is triggered by improper pr...

Ubuntu Update for linux-mvl-dove USN-1328-1

Ubuntu Update for Linux kernel vulnerabilities USN-1328-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13281.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-mvl-dove USN-1328-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

CVE-2011-1328

The CVE-2011-1328 issue affects RADVISION’s iVIEW Suite (pre-7.5). The connected sources confirm a SQL injection vulnerability in iVIEW Suite that allows a remote attacker to view or alter data via unspecified vectors. Affected product/version: iVIEW Suite prior to v7.5. Root cause: SQL injection...

CVE-2011-1328

SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1328

TornadoStore 1.4.3 and earlier is affected by multiple reflected XSS vulnerabilities. The issues arise from insufficient sanitization of user-supplied input in several parameters across both the Services, Products, and e-Commerce sections, including login_registrese.php3 (tipo, destino), precios....

TornadoStore 1.4.3 XSS Vulnerability

Exploit for php platform in category web applications ==================================== TornadoStore 1.4.3 XSS Vulnerability ==================================== 1. Advisory Information Title: Multiple XSS in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0107 Advisory URL:...

CVE-2009-1328

CVE-2009-1328 affects Mini-stream RM-MP3 Converter; the stack-based buffer overflow is triggered by a long URI in an M3U playlist, enabling code execution. Public records reference vulnerable versions such as 3.0.0.7 and later 3.1.2.1.2010.03.30, with related exploit material describing ASLR/DEP ...

CVE-2009-1328

Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CA ARCserve Backup for Laptops and Desktops LGServer service code execution

Added: 05/07/2008 CVE: CVE-2008-1328 BID: 28616 OSVDB: 44320 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in BrightStor ARCserve Backup for...

CVE-2008-1328

CVE-2008-1328 is a buffer overflow in the LGServer service of CA ARCserve Backup for Laptops and Desktops (BrightStor ARCserve Backup) that allows remote code execution via long command arguments. Affected versions include r11.0 through r11.5 and Suite 11.1/11.2. Exploitation could grant System-l...

Debian DSA-1328-1 : unicon-imc2 - buffer overflow

Steve Kemp from the Debian Security Audit project discovered that unicon-imc2, a Chinese input method library, makes unsafe use of an environmental variable, which may be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2007-1328

The CVE-2007-1328 entry describes a cross-site scripting (XSS) vulnerability in formulaire.php of Bernard JOLY BJ Webring. Affects the add link menu functionality; an unspecified parameter allows remote attackers to inject arbitrary web script or HTML. The issue enables client-side script executi...

EV0105.txt

New eVuln Advisory: Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection http://evuln.com/vulns/105/summary.html --------------------Summary---------------- eVuln ID: EV0105 CVE: CVE-2006-1328 Software: Skull-Splitter's PHP Downloadcounter for Wallpapers Sowtware's Web Site:...

CVE-2006-1328

SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 countfieldname, 2 urlfieldname, or 3 url parameter...

CVE-2006-1328

The CVE concerns Skull-Splitter’s PHP Downloadcounter for Wallpapers 1.0. Vulnerable file: count.php; vulnerable parameters: count_fieldname, url_fieldname, and url. The underlying cause is unsanitized input used in SQL queries, enabling remote SQL injection. Exploitation details are supported by...

CVE-2005-1328

OneWorldStore is affected by CVE-2005-1328. The vulnerability is a denial-of-service condition caused by remote requests to the owConnections/chksettings.asp endpoint, which can crash the application. The available connected data confirms the vulnerable component and the impact but provides limit...