mmPlayer 2.2 (.ppl) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN Greetz: Inj3ct0r Exploit DataBase...

mmPlayer 2.2 (.m3u) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Title: mmPlayer 2.2 .m3u Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN Greetz: Inj3ct0r Exploit DataBase...

mmPlayer 2.2 - .m3u Local Buffer Overflow (SEH)

mmPlayer 2.2 - .m3u Local Buffer Overflow SEH !/usr/bin/perl Title: mmPlayer 2.2 .m3u Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.m3u"; my $junk= "\x41" x 4090; my...

mmPlayer 2.2 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/perl Title: mmPlayer 2.2 .m3u Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.m3u"; my $junk= "\x41" x 4090; my $nextseh= "\xEB\x06\x90\x90"; my $seh=...

Android FTPServer 1.9.0 Denial Of Service

Exploit Title: Android FTPServer 1.9.0 Remote DoS Date: 03/20/12 Author: G13 Twitter: @g13net Software Site: https://sites.google.com/site/andreasliebigapps/ftpserver/ Download Link: http://www.g13net.com/ftpserver.apk Version: 1.9.0 Category: DoS android Vulnerability FTPServer is vulnerable to ...

CVE-2012-1404

Unspecified vulnerability in the Dolphin Browser Mini com.dolphin.browser application 2.2 for Android has unknown impact and attack vectors...

CVE-2012-1217

CVE-2012-1217 concerns SQL injection in the STHS v2 Web Portal 2.2. Connected sources (OpenVAS tests) indicate the issue affects the application via the ‘team’ parameter, enabling multiple SQLi payloads and data access/modification. The root cause is insufficient input sanitization in the applica...

Webkit normalize bug for android 2.2 (CVE-2010-1759)

No description provided by source. !-- CVE-2010-1759 webkit normalize bug Tested on Moto Droidx2 running 2.2. Droidx2 running 2.3 is vulnerable but exploit fails due to non-executable heap. Still working on a way around that : 2.1 - 2.3 emulator. The changes needed are documented in the code. The...

STHS v2 Web Portal - 'team.php?team' SQL Injection

source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Debian: Security Advisory (DSA-2377-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2377-1 (cyrus-imapd-2.2)

The remote host is missing an update to cyrus-imapd-2.2 announced via advisory DSA 2377-1. OpenVAS Vulnerability Test $Id: deb23771.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2377-1 cyrus-imapd-2.2 Authors: Thomas Reinke Copyright: Copyright c 2012...

Apache HTTP Server mod_proxy Reverse Proxy HTTP 0.9 Information Disclosure

The version of Apache HTTP Server running on the remote host has an information disclosure vulnerability. When configured as a reverse proxy, improper use of the RewriteRule and ProxyPassMatch directives could cause the web server to proxy requests to arbitrary hosts. This could allow a remote...

Android 2.2 Webkit Normalize

LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; // "\u0056\u0056" FOR EMULATOR var scode = unescape"\u5200\u5200"; /...

Webkit normalize bug for android 2.2 (CVE-2010-1759)

Exploit for Android platform in category remote exploits LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; //...

Webkit Normalize Bug - Android 2.2

LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; // "\u0056\u0056" FOR EMULATOR var scode = unescape"\u5200\u5200"; /...

AWCM 2.2 LFI

Local file include vulnerability in AWCM awcmlang cookie parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CVE-2012-0053

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request aka 400 error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a 1 long or 2 malformed header in...

Stack overflow

Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by...

CVE-2011-3874

CVE-2011-3874 describes a use-after-free vulnerability in Android’s libsysutils, triggered via FrameworkListener::dispatchCommand when invoked with an incorrect number of arguments. Affected Android versions are 2.2.x–2.2.2 and 2.3.x–2.3.6. The issue was demonstrated by zergRush and, per sources,...

JVN#38216398: osCommerce vulnerable to directory traversal

osCommerce is an open source system for creating shopping websites. osCommerce contains a directory traversal vulnerability. Impact A remote attacker may access arbitrary files on the server. Solution Update the software Update to the latest version according to the information provided by the...