SkinCrafter ActiveX Control version 3.0 Buffer Overflow

Exploit for windows platform in category local exploits Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17...

SkinCrafter 3.0 Buffer Overflow

Exploit for windows platform in category dos / poc Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17, 201...

SkinCrafter ActiveX Control 3.0 - Local Buffer Overflow

SkinCrafter ActiveX Control 3.0 - Local Buffer Overflow Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17...

SkinCrafter ActiveX Control 3.0 - Local Buffer Overflow

Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17, 2012 Tested on : XP SP2 The vulnerability lies in the...

[SECURITY] Fedora 15 Update: xulrunner-12.0-1.fc15

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Varzesh3.com Cross Site Scripting

Exploit Title: Varzesh3.com Cross Site Scripting Date: 29.04.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot Especially thanks to N1theme.com ------------------------------------------------------ P0C:...

PT-2012-3549

Name of the Vulnerable Software and Affected Versions ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite affected versions not specified Description The issue is related to multiple stack-based buffer overflows in COM and ActiveX...

ActiveScriptRuby 'GRScript18.dll' ActiveX控件DLL装载任意代码执行漏洞

Bugtraq ID: 53011 CVE ID：CVE-2012-1241 ActiveScriptRuby用于把Ruby实现到Windows环境中。 ActiveScriptRuby存在一个安全漏洞，允许恶意用户执行任意代码。 GRScript18.dll存在一个错误，可被利用执行任意Ruby命令，构建恶意WEB页，诱使用户解析可触发此漏洞。 0 ActiveScriptRuby 1.8.7.34 厂商解决方案 用户可联系厂商升级到最新版本： http://www.artonx.org/data/asr/ 或通过执行如下命令注销COM服务： regsvr32 /u...

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Change admin password

Exploit for hardware platform in category web applications Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

ZTE - Change Admin Password

Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password------------------------------------------------------Contact...

NTG Haber Yazilim 1 SQL Injection

Exploit Title; NTG Haber Yazilim v1 - SQL Injection Vulnerability Date ; 14/03/12 Author ; 3spi0n Script Vendor ; www.netgenel.net/index/1/ntg-haber-yazilimi-v1.html Script Demo ; http://www.netgenel.net/v1/anasayfa.php Category ; Webapps Type ; Sql Injection Tested on ; Ubuntu / Win7 Script...

CVE-2012-1390

Unspecified vulnerability in the Miso com.bazaarlabs.miso application 2.2 for Android has unknown impact and attack vectors...

Mercurycom MR804 Router Denial Of Service

Title: Mercurycom MR804 Router - Multiple HTTP Header Fields Denial Of Service Vulnerability Product : Mercurycom MR804 Router Hardware Version : MR804 v8.0 081C3113 Software Version : 3.8.1 Build 101220 Rel.53006nB Vendor: http://www.mercurycom.com.cn/ Class: Boundary Condition Error CVE: Remote...

Retrieving the COM class factory for component with CLSID {xxxxxxxx} failed due to the following error: 800700c1.

Creating or copying folders with Veeam FastSCP 3.0.3 fails with the error: Retrieving the COM class factory for component with CLSID xxxxxxxx failed due to the following error: 800700c1...

[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

STHS v2 Web Portal 2.2 SQL Injection

================================================= STHS v2 Web Portal 2.2 SQL Injection Vulnerabilty ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 . 3 7 \ \ || / \ 7 1 | | \ | | / /\ / / \ / \ / \ 1 3 | | | \ \ / / ...

Joomla Component (com_bnf) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component combnf SQL Injection Vulnerability Google Dork: index.php?option=combnf Date: 22/12/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Tested on:...

Unfixed XSS vulnerability at www.homeshop18.com

Security researcher Vijayendra Nigam, has submitted on 26/01/2012 a cross-site-scripting XSS vulnerability affecting www.homeshop18.com, which at the time of submission ranked 1986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It ...

Null pointer dereference

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

Unfixed XSS vulnerability at www.photo400.com

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.photo400.com, which at the time of submission ranked 4282713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. It is...