CVE-2007-4803

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

atomix23-overflow.txt

0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com...

AtomixMP3 2.3 - .pls Local Buffer Overflow

AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...

AtomixMP3 2.3 (pls File) Local Buffer OverFlow Exploit

Exploit for unknown platform in category local exploits ====================================================== AtomixMP3 2.3 pls File Local Buffer OverFlow Exploit ====================================================== 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EI...

Heap overflow

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2893

CVE-2007-2893 describes a heap-based buffer overflow in Bochs’ NE2000 emulation (bx_ne2k_c::rx_frame in iodev/ne2k.cc). The flaw lets a local guest OS user write to arbitrary host memory and potentially gain host privileges by triggering TXCNT values to exceed device memory. Connected sources cor...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...

Crlf injection

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2006-7062

CVE-2006-7062 affects Kamgaing Email System (kmail) version ≤ 2.3. The vulnerability in calendar.php arises from handling an invalid d parameter, causing an error message that leaks the server’s full filesystem path. This is an information disclosure (remote, network-based) with a CVSS v2 base sc...

CVE-2007-0576

PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...

CVE-2006-6191

CVE-2006-6191 affects 8pixel.net SimpleBlog prior to or including version 2.3. The vulnerability is an SQL injection in admin/edit.asp via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry corroborates a possible high-severity impact with base score 7.5 ...

SimpleBlog 2.3 - adminedit.asp SQL Injection

SimpleBlog 2.3 - adminedit.asp SQL Injection Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SimpleBlog = 2.3 admin/edit.asp Remote SQL Injection Vulnerability ===================================================================== Title : simpleblog = v 2.3...

SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection

Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

CVE-2006-5899

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

CVE-2006-5924

The CVE-2006-5924 entry documents a cross-site scripting (XSS) vulnerability in Efficient IP iPmanager (IPm) 2.3, exploitable through the errmsg parameter of index.php. The underlying issue is an reflected/scriptable input being echoed in the web page, allowing remote attackers to inject arbitrar...