CVE-2014-2206

CVE-2014-2206 is a stack-based buffer overflow in GetGo Download Manager versions up to 4.9.0.1982 (and earlier like 4.8.2.1346, 4.4.5.502) that can be triggered by a long HTTP response header. Exploitation evidence in public advisories and exploit tooling shows remote code execution and crash po...

GetGo Download Manager栈缓冲区溢出漏洞

No description provided by source. Registers: EAX 00000000 ECX CCCCCCCC EDX 76F2B4AD ntdll.76F2B4AD EBX 00000000 ESP 0474BD5C EBP 0474BD7C ESI 00000000 EDI 00000000 EIP CCCCCCCC C 0 ES 002B 32bit 0FFFFFFFF P 1 CS 0023 32bit 0FFFFFFFF A 0 SS 002B 32bit 0FFFFFFFF Z 1 DS 002B 32bit 0FFFFFFFF S 0 FS...

GetGo Download Manager 4.x Stack Buffer Overflow

RCE Security Advisory http://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: GetGo Download Manager Vendor URL: www.getgosoft.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2014-02-20 Date published: 2014-03-02 CVSSv2 Score: 10,0 AV:N/AC:L/Au:N/C:C/I:C/A:C...

CVE-2013-7319

Cross-site scripting XSS vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field...

CVE-2013-7319

CVE-2013-7319 concerns the WordPress Download Manager plugin prior to version 2.5.9. The vulnerability is a cross-site scripting (XSS) flaw in the title field, where user-supplied input can be injected as script/HTML and executed in the context of the affected site. The issue arises from insuffic...

CVE-2013-7319

Cross-site scripting XSS vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field...

Internet Download Manager 6.17 (.ef2) Memory Corruption

Exploit for windows platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site...

WordPress Plugin Download Manager Free Pro 2.5.8 - Persistent Cross-Site Scripting

WordPress Plugin Download Manager Free Pro 2.5.8 - Persistent Cross-Site Scripting Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro Persistent Cross Site Scripting Google Dork: Date: 12-06-2013 Exploit Author: IT Nerdbox Vendor Homepage: http://www.wpdownloadmanager.com...

WordPress Plugin Download Manager Free & Pro 2.5.8 - Persistent Cross-Site Scripting

Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro Persistent Cross Site Scripting Google Dork: Date: 12-06-2013 Exploit Author: IT Nerdbox Vendor Homepage: http://www.wpdownloadmanager.com Software Link: http://downloads.wordpress.org/plugin/download-manager.zip Version: v3.3...

Wordpress Download Manager Free & Pro 2.5.8 - Persistent Cross Site Scripting

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro Persistent Cross Site Scripting Google Dork: Date: 12-06-2013 Exploit Author: IT Nerdbox Vendor Homepage: http://www.wpdownloadmanager.com Software Link:...

WordPress Download Manager Free & Pro Plugin 2.5.8 - Persistent Cross Site Scripting

Download Manager Free & Pro plugin is prone to a persistent XSS vulnerability. The title input field is not sanitized and therefor vulnerable to persistent cross site scripting. Solution Upgrade the plugin...

Download Lite v4.3 iOS - Persistent File Web Vulnerability

Document Title: =============== Download Lite v4.3 iOS - Persistent File Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1023 Release Date: ============= 2013-07-18 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-2697

Cross-site request forgery CSRF vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

WordPress Download Manager Plugin <= 1.60 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that insert cross site scripting sequences. Solution Update the plugin...

Internet Download Manager - Local Stack Buffer Overflow

Internet Download Manager - Local Stack Buffer Overflow !/usr/bin/perl 1 ========================================== 1 0 I'm Dark-Puzzle From Inj3ct0r TEAM 0 0 1 1 dark-puzzleatliveatfr 0 0 ========================================== 1 1 White Hat 1 0 Independant Pentester 0 1 exploit coder/bug...

Internet Download Manager All Versions - Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote,...

Internet Download Manager - Memory Corruption

!/usr/bin/perl 1 ========================================== 1 0 I'm Dark-Puzzle From Inj3ct0r TEAM 0 0 1 1 dark-puzzleatliveatfr 0 0 ========================================== 1 1 White Hat 1 0 Independant Pentester 0 1 exploit coder/bug researcher 0...

WordPress Download Manager 2.2.2 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

Download Manager 2.2.2 'cid' Parameter Cross Site Scripting Vulnerability

Download Manager 2.2.2 'cid' Parameter Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53517/info The Download Manager plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize...