CORE MultiMedia Suite 2011 CORE Player 2.4 - '.m3u' Local Buffer Overflow

Exploit: CORE Multimedia Suite 2011 CORE Player 2.4 Unicode SEH Buffer Overflow Exploit .m3u Date: 18.03.11 Author: Rh0atz1p.biz Software Link: http://mjm-soft.zzl.org/COREMMS2011.zip Version: 2.4 Tested on: WinXP Pro SP3 EN VirtualBox The application does not crash immediately: Open Core Player,...

Ubertooth - An Open Source Bluetooth Test Tool download !

This project was originally unveiled at the recently concluded ShmooCon. It shows a lot of promise and the authors two years of study and experimentation. The name is Ubertooth. Ubertooth is an open source 2.4 GHz wireless development platform suitable for passive bluetooth monitoring. It aims to...

CVE-2010-4071

Cross-site scripting XSS vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail...

CVE-2010-4071

Cross-site scripting XSS vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail...

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service source: https://www.securityfocus.com/bid/46831/info OpenLDAP is prone to a remote denial-of-service vulnerability that affects the 'modify relative distinguished name' modrdn command. Attackers can exploit this issue to deny service to...

WM Downloader 3.1.2.2 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================== WM Downloader 3.1.2.2 DLL Hijacking Exploit =========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

ALPHA Player 2.4 - .bmp Buffer Overflow

ALPHA Player 2.4 - .bmp Buffer Overflow source: https://www.securityfocus.com/bid/44196/info ALPHA Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the...

CVE-2009-4974

Directory traversal vulnerability in boxdisplay.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the box parameter...

CVE-2009-4973

SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal parameter in a SwitchCal action...

Directory traversal

Directory traversal vulnerability in boxdisplay.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the box parameter...

CVE-2009-4973

SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal parameter in a SwitchCal action...

Authentication flaw

admin/manageusers.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055...

CVE-2009-4928

CVE-2009-4928 describes a PHP remote file inclusion vulnerability in TotalCalendar 2.4, where an attacker can cause arbitrary PHP code execution via a URL in the inc_dir parameter of config.php. The entry notes a distinct vector from CVE-2006-1922 and CVE-2006-7055. The provided documents reitera...

CVE-2009-4875

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

CVE-2009-4875

CVE-2009-4875 affects FCKeditor.Java 2.4. The vulnerability enables remote denial of service by sending a malformed request parameter containing control characters, which can trigger an infinite loop in the Java-based connector. The issue is described across multiple sources (NVD/NASL/Nessus refe...

CVE-2009-4678

Cross-site scripting XSS vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4678

Winn Guestbook 2.4 is affected by a Cross-site scripting (XSS) vulnerability in index.php, exploitable via PATH_INFO to inject arbitrary web script or HTML. The provided documents identify the vulnerable component as Winn Guestbook 2.4 (index.php) and the exploit vector PATH_INFO but do not inclu...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : python2.4 vulnerabilities (USN-890-3)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for the PyExpat module in Python 2.4. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked in...