65 matches found
NO-IP DUC 4.1.1 - Unquoted Service Path Privilege Escalation
NO-IP DUC 4.1.1 - Unquoted Service Path Privilege Escalation ===================================================== NO-IP DUC v4.1.1 - Unquoted Service Path Privilege Escalation ===================================================== Vendor Homepage: http://noip.com Date: 14 Oct 2016 Software Link :...
NO-IP DUC 4.1.1 - Unquoted Service Path Privilege Escalation
===================================================== NO-IP DUC v4.1.1 - Unquoted Service Path Privilege Escalation ===================================================== Vendor Homepage: http://noip.com Date: 14 Oct 2016 Software Link : http://www.noip.com/client/DUCSetupv411.exe Version : 4.1.1...
No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
No description provided by source. !/usr/bin/env python Title: No-IP Dynamic Update Client DUC 2.1.9 local IPaddress stack overflow Author: Alberto Ortega @a0rtega [email protected] Date: May 11 2013 vulnerability discovered Background: No-IP is probably the most used Dynamic DNS provider...
No-IP DUC Client for Windows - Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29758/info The DUC application for No-IP is prone to a local information-disclosure vulnerability when it is running on Microsoft Windows. Successfully exploiting this issue allows attackers to obtain potentially sensitiv...
No-IP DUC <= 2.1.7 - Remote Code Execution Exploit
No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...
No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
To be easily portable, the client is written in C, with minimal dependencies. So far so good, but the problem is, it is plagued of buffer overflows. import os binary = "./noip-2.1.9-1/binaries/noip2-i686" shellcode = "\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b"...
No-IP DUC RCE Vulnerability
No-IP DUC is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
No-IP DUC Remote code execution vulnerability
This host has No-IP DUC installed and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbnoipdnsbofvuln.nasl 5158 2017-02-01 14:53:04Z mime $ No-IP DUC Remote code execution vulnerability Authors: Chandan S Copyright: Copyright c 2008 Greenbone Networks GmbH,...
CVE-2008-5297
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...
CVE-2008-5297
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...
CVE-2008-5297
The CVE-2008-5297 issue affects the No-IP DUC/no-ip-updater, where the GetNextLine() function in noip2.c lacks a length check, causing a stack-based buffer overflow. This allows a remote attacker to execute arbitrary code by sending a crafted HTTP response to DNS update traffic. Exploitation is c...
CVE-2008-5297
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...
No-IP DUC <= 2.1.7 Remote Code Execution Exploit
No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...
No-IP DUC <= 2.1.7 Remote Code Execution Exploit
Exploit for linux platform in category remote exploits ================================================ No-IP DUC include include include include include include include define HTTPOK "HTTP/1.1 200 OK\r\n\r\n" define NOIPPORT 8245 define uchar unsigned char / Offsets del shellcode x version ubica...
Windows Media Encoder wmex.dll ActiveX Control BOF Exploit (MS08-053)
No description provided by source. html pre ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploi...
Microsoft Windows Media Encoder (XP SP2) - wmex.dll ActiveX Buffer Overflow (MS08-053)
Microsoft Windows Media Encoder XP SP2 - wmex.dll ActiveX Buffer Overflow MS08-053 ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow...
Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)
============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...
Google Chrome 0.2.149.27 - SaveAs Remote Buffer Overflow
Google Chrome 0.2.149.27 - SaveAs Remote Buffer Overflow PoC Code is in Attach file because this file is saved in 'Unicode' type for exploit. Here is Description for this Vuln : · Type of Issue : Buffer Overflow. · Affected Software : Google Chrome 0.2.149.27. · Exploitation Environment : Goog...
Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow
PoC Code is in Attach file because this file is saved in 'Unicode' type for exploit. Here is Description for this Vuln : · Type of Issue : Buffer Overflow. · Affected Software : Google Chrome 0.2.149.27. · Exploitation Environment : Google Chrome Language: Vietnamese on Windows XP SP2. ·...
CVE-2008-2747
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows stores sensitive data in the HKLM\SOFTWARE\Vitalwerks\DUC registry key with weak permissions, allowing local users to read (TrayPassword, Username, Password, Hosts) and obtain obfuscated passwords and other sensitive information. This CVE is docu...