httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)

No description provided by source. Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested...

VideoDB <= 2.2.1 (pdf.php) Remote File Include Exploit

1.漏洞分析 php define'FPDF', $config'pdfmodule';//这里可控 define'FPDFFONTPATH', FPDF.'/font/'; requireonce FPDF.'/fpdf.php'; //这里包含漏洞 requireonce './core/functions.php'; requireonce './engines/engines.php'; requireonce './core/VariableStream.class.php'; .... 2.漏洞利用...

TVT TD-2308SS-B DVR - Directory Traversal Vulnerability

No description provided by source. Exploit Title: TVT TD-2308SS-B DVR directory traversal Shodan Dork: Cross Web Server Date: 01 Dec 2013 Disclosure date: 10 Sep 2013 Exploit Author: Cesar Neira Vendor Homepage: http://en.tvt.net.cn/ Affected Firmware Versions: 3.1.43.B 3.1.43.P 3.1.6.P-1.0.2.1-0...

Winamp 5.572 - whatsnew.txt SEH (meta)

No description provided by source. Title: Winamp 5.572 whatsnew.txt SEH MSF Author: Blake Published: 2010-04-15 Tested on Windows XP SP3 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for...

Cam2pc 4.6.2 - BMP Image Processing Integer Overflow Vulnerability

No description provided by source. Application: Cam2pc BMP Image Processing Integer Overflow Vulnerability Platforms: Windows Vendor : http://www.nabocorp.co Versions : The vulnerability is confirmed in version 4.6.2 Freeware Edition Other versions may also be affected. Date : 2013-03-13 Contact ...

Xunlei XPPlayer <= 5.9.14.1246 ActiveX Remote Exec 0day PoC

No description provided by source. Author: superli Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan Playerhttp://dl.xunlei.com/xmp.html. I exposed this vunl...

Rumba FTP Client FTPSFtp.dll 4.2.0.0 - OpenSession() Buffer Overflow

No description provided by source. html head titleRumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r/title /head body object classid=clsid:677A6F83-52A0-4931-8E62-EC713EE9B949 id=ftpsftp/object script language=JavaScript / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession...

Valve Software Source Engine - Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may...

BlueZ 1.x/2.x - HIDD Bluetooh HID Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22076/info BlueZ hidd is prone to a device-command-injection vulnerability. A remote attacker can exploit this issue to gain control of mouse and keyboard HIDs human interface device. This will allow the attacker to...

Audio Workstation 6.4.2.4.3 pls Buffer Overflow

No description provided by source. $Id: audiowkstnpls.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Xion Player 1.0.125 Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...

PBBoard 2.1.4 - Local File Inclusion

No description provided by source. Exploit Title: PBBoard 2.1.4 Local File Inclusion Software Link: http://www.pbboard.com/PBBoardv2.1.4.zip Author: n4ss1m Date: 25-05-2012 Tested on: win/linux Home : www.Sec4ever.com Exploit-DB note: Need to be logged in, at the very least, as a standard user to...

ProFTPD <= 1.2.9 rc2 (ASCII File) Remote Root Exploit

No description provided by source. ProFTPd remote root exploit solareclipse at phreedom dot org GPG key ID: E36B11B7 http://www.exploit-db.com/sploits/12262006-proftpd-not-pro-enough.tar.gz milw0rm.com 2003-10-15...

Adobe Shockwave Director tSAC - Chunk Memory Corruption

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Adobe Shockwave Director tSAC Chunk memory corruption Version : dirapi.dll 11.5.7 Analysis : http://www.abysssec.com Vendor...

Outpost Firewall PRO 4.0 - Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation directory. A local...

Opium OPI Server and CyanPrintIP - Format String and Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27734/info Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affect...

Microsoft Organization Chart 2 - Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...

CVS 1.11.x Directory Request Double Free Heap Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6650/info CVS is prone to a double free vulnerability in the Directory requests. An attacker may potentially take advantage of this issue to cause heap memory to be corrupted with attacker-supplied values, which may resul...

Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute

No description provided by source. Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute Date: 2011-5-27 Discovered by: boahat vendor: http://www.magnetosoft.com/ Download: http://www.magnetosoft.com/downloads/skicmpsetup.exe SKIcmp.ocx Function ICMPSendEchoRequest ByVal...

Kolibri <= 2.0 - HTTP Server HEAD Buffer Overflow

No description provided by source. $Id: kolibrihttp.rb 10887 2011-08-03 12:19:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...