KLA10400 DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities 1. Improper handling of n and r symbols can be exploited remotely via a specially designed packet; 2. Improper...

ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC

No description provided by source. ? ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation, which includ...

ACE Stream Media 2.1 - acestream: Format String

ACE Stream Media 2.1 - acestream: Format String ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation,...

CVE-2013-5165

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured...

CVE-2013-5165

CVE-2013-5165 concerns Mac OS X before 10.9, where the Application Firewall’s socketfilterfw fails to properly implement the --blockApp option. This allows remote attackers to bypass intended access restrictions by initiating a network connection to an application for which blocking has been conf...

CVE-2013-5165

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured...

CVE-2011-5165

CVE-2011-5165 concerns Free MP3 CD Ripper (versions 1.1, 2.6 and earlier). The vulnerability is a stack-based buffer overflow in the WAV conversion path that can be triggered by a crafted WAV file, enabling user-assisted remote code execution. In practice, an attacker could exploit this by convin...

CVE-2010-5165

CVE-2010-5165 concerns a race condition in Malware Defender 2.6.0 on Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that signature-based malware detectors would not block, via certain user-space memory changes during hook-handler execution. This is describ...

Free MP3 CD Ripper 1.1 WAV File Stack Buffer Overflow

This module exploits a stack based buffer overflow found in Free MP3 CD Ripper 1.1. The overflow is triggered when an unsuspecting user opens a malicious WAV file. Module Options msf use exploit/windows/fileformat/free/mp3ripperwav msf undefinedmp3ripperwav show actions ...actions... msf...

CVE-2011-5165

creationtimestamp| type| source ---|---|--- 2010-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11975 2010-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11976 2010-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12012 2011-08-27...

CVE-2008-5165

CVE-2008-5165 affects eTicket 1.5.7, with multiple SQL injection vulnerabilities exposed via the pri parameter to index.php, open.php, open_raw.php, and newticket.php. The root cause is unparameterized SQL handling in these PHP entry points, enabling remote attackers to modify or exfiltrate data ...

SuSE 10 Security Update : nagios (ZYPP Patch Number 5165)

This update fixes several cross-site scripting XSS issues in nagios. CVE-2007-5624 / CVE-2007-5803 / CVE-2008-1360 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-5165

The CVE-2007-5165 issue affects myIpacNG-stats (MINGS) v0.05, where init.php accepts a URL in the MINGS_BASE parameter, enabling potential remote PHP code execution via a remote file inclusion vulnerability. The description notes that this claim is disputed by CVE because MINGS_BASE is defined be...

CVE-2006-5165

The CVE-2006-5165 entry concerns a PHP remote file inclusion in inc/functions.inc.php of Skrypty PPA Gallery 1.0 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the config[ppa_root_path] parameter. According to the sources, the vulnerability impact inc...