CVE-2013-0752

Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XBL file with multiple bindings that...

anwsion the latest version of any upload-vulnerability warning-the black bar safety net

Upload attachments where not properly handle the file suffix problem: ! Judgment is the file header does not determine the suffix problem。。。。。。。。 Vulnerability to prove: http://wenda.anwsion.com/uploads/questions/20121126/e826a3e05a4beb6c24373ba014fe39f8.phppass Merge pictures word Trojan...

CubeCart 5.0.7 and lower versions | Insecure Backup File Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

RealPlayer - '.RealMedia' File Handling Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'RealPlayer...

Microsoft Windows File Handling Component Remote Code Execution Vulnerability (2758857)

This host is missing a critical security update according to Microsoft Bulletin MS12-081. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-081: Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)

The remote host is affected by a remote code execution vulnerability that could be exploited if a user browses to a folder containing a file or subfolder with a specially crafted name. When exploiting this vulnerability, an attacker could gain the same user permissions as the current user. C...

MS12-081: Vulnerability in Windows file handling component could allow remote code execution: December 11, 2012

None None...

Centrify Deployment Manager v2.1.0.283

Centrify Deployment Manager v2.1.0.283 While at a training session for centrify, I noticed poor handling of files in /tmp. I was able to overwrite /etc/shadow with the contents of adcheckDMoutput. I am sure there are more vulnerabilities to be exploit, maybe a local root - but being this is a...

Format Factory v3.0.1 Profile File Handling Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Tested o...

Microsoft Excel Malformed File Memory Corruption (MS12-076; CVE-2012-1886)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

Symantec Ghost Solution Suite Backup File Handling Memory Corruption (SYM12-016)

The Symantec Ghost Solution Suite install on the remote Windows host is earlier than build 11.5.1.2620. As such, it is potentially affected by a memory corruption vulnerability when parsing specially crafted '.gho' files. By exploiting this flaw, a remote attacker could execute arbitrary code on...

Microsoft Office Word 2010 Stack Overflow

StackOverflow during the handling of the doc files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact :...

Microsoft Works CVE-2012-2550 Word File Handling Remote Memory Corruption Vulnerability

Description Microsoft Works is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsof...

phpMyBitTorrent 2.04 - Multiple Vulnerabilities

phpMyBitTorrent 2.04 - Multiple Vulnerabilities waraxe-2012-SA091 - Multiple Vulnerabilities in phpMyBitTorrent 2.04 =============================================================================== Author: Janek Vind "waraxe" Date: 01. October 2012 Location: Estonia, Tartu Web:...

phpMyBitTorrent 2.04 SQL Injection / Local File Inclusion

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Date: 01. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-91.html Description of vulnerable target: phpMyBitTorrent is the brand new Open Source solution for BitTorrent communities!...

Ubuntu: Security Advisory (USN-1591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell GroupWise Client 8.x < 8.0.3 / 2012.x < 2012 SP1 Unspecified File Handling Arbitrary Code Execution

The version of Novell GroupWise Client installed on the remote Windows host is 8.x earlier than 8.0.3 8.0.3.21955 or 2012.x earlier than 2012 SP1 12.0.1.13731. As such, it is reportedly affected by an unspecified code execution vulnerability. By tricking a user into opening a specially crafted...

NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link:...

NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow

NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Lin...

NCMedia Sound Editor Pro 7.5.1 Buffer Overflow

!/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link: http://www.soundeditorpro.com/ Tested on: Windows XP SP3 Professional German...