CVE-2010-1317: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...

Unfixed XSS vulnerability at base64-decode.php-functions.com

Security researcher trueliarx, has submitted on 18/04/2010 a cross-site-scripting XSS vulnerability affecting base64-decode.php-functions.com, which at the time of submission ranked 2453197 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities

Binary data 5511.prm...

RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities

According to its banner, the remote host is running version 11.x, 12.x, or 13.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities : - A heap overflow exists in the NTLM authentication code related to invalid Base64 encoding...

PHP 6.0 Dev str_transliterate() Buffer Overflow

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...

PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass

Exploit for windows platform in category local exploits ================================================================== PHP 6.0 Dev strtransliterate Buffer overflow - NX + ASLR Bypass ================================================================== whoami whoami nt authority\system /...

Debian DSA-2025-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2408 Dan Kaminsky and Moxie Marlinspike discovered that icedove does...

DSA-2025-1 icedove - several vulnerabilities

Bulletin has no description...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Mozilla Base64 decoding crash

Multiple integer overflows in the 1 PLBase64Decode and 2 PLBase64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash...

Adobe Acrobat libtiff Remote Code Execution Vulnerability

Exploit for unknown platform in category remote exploits ========================================================= Adobe Acrobat libtiff Remote Code Execution Vulnerability ========================================================= Exploit Title: Adobe Acrobat libtiff Remote Code Execution Author:...

Kolang 4.3.10 5.3.0 - proc_open() PHP safe_mode Bypass

Kolang 4.3.10 5.3.0 - procopen PHP safemode Bypass // "shellcode loader" : load and execute arbitrary shellcode from a file // Hami...

Cybershade CMS 0.2b Session Hijacking PoC Vulnerability

Exploit for unknown platform in category web applications ======================================================= Cybershade CMS 0.2b Session Hijacking PoC Vulnerability ======================================================= p0c!: Session Hijacking Cybershade CMS 0.2b Session Hijacking PoC...

To bypass the <? PHP exit('Access Denied'); ?> Limit-vulnerability warning-the black bar safety net

To bypass ? PHP exit’Access Denied’; ?& gt; limit ? php $shellcode=’PD9waHBpbmZvKCk7Pz4’;// base64decode ? phpinfo;?& gt; $endstr=’s’; $timestamp=$endstr.$ shellcode; fileputcontents"php://filter/write=convert.base64-decode/resource=ryat.php","? PHP exit’Access Denied’; ?& gt;\t$timestamp"; ?& gt...

Easy~Ftp Server v1.7.0.2 (HTTP) Remote BOF Exploit

No description provided by source. Exploit Title: EasyFtp Server v1.7.0.2 HTTP Remote BOF Exploit Date: 18-02-2010 Author: ThE g0bL!N Software Link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip Code : !/usr/bin/python import sys import...

EasyFTP Server 1.7.0.2 - 'HTTP' Remote Buffer Overflow

Exploit Title: EasyFtp Server v1.7.0.2 HTTP Remote BOF Exploit Date: 18-02-2010 Author: ThE g0bL!N Software Link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip Code : !/usr/bin/python import sys import socket import base64 if lensys.argv...

Directory traversal

Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2010-0613

CVE-2010-0613 describes a directory traversal vulnerability in ARWScripts Fonts Script, via viewfile.php, allowing remote reading of arbitrary local files through a base64-encoded f parameter. Affected component: ARWScripts Fonts Script (viewfile.php). Root cause: improper handling of path traver...

Nautilus File Manager Proof Of Concept

According to the GNOME documentations, the file manager Nautilus is able to display a preview of most of the files. My Proof Of Concept works using the default settings. tested on VirtualBox: Ubuntu, 2.6.28-17-generic, GNOME, Nautilus 2.26.2 ++++ BEGIN BASE64 CONTENT ++++...

Fonts Site Script - Remote File Disclosure

Fonts Site Script - Remote File Disclosure =---------------------------------------------= = ,.:oO0^-^0Oo:., = = JIKO = = '':0Oov-voO0:'' = =---------------------------------------------= ----------------------=JIKO=------------------- | Autor : jiko | Home : WwW.No-Exploit.CoM | | Bug : Remote...