CVE-2009-4363: Improper Neutralization of Input During Web Page Generation

TextFilter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting XSS attacks via data:text/html...

CVE-2008-6998: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in chrome/common/gfx/urlelider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target href attribute with a large number of path elements, which triggers the overflow wh...

SDP Downloader ASX File Heap Buffer Overflow Vulnerability

This host is installed with SDP Downloader and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodsdpdownloaderbofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SDP Downloader ASX File Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

Stack overflow

Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via 1 a long rtsp URL in a .ram file and 2 a long string in the HREF attribute of a REF element in a .asx file...

CVE-2009-1641

Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via 1 a long rtsp URL in a .ram file and 2 a long string in the HREF attribute of a REF element in a .asx file...

CVE-2009-1645

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via 1 a long rtsp URL in a .ram file and 2 a long string in the HREF attribute of a REF element in a .asx file...

CVE-2009-1645: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via 1 a long rtsp URL in a .ram file and 2 a long string in the HREF attribute of a REF element in a .asx file...

CVE-2009-1627: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Streaming Download Project SDP Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file...

Mini-stream Ripper 3.0.1.1 - .asx HREF Local Buffer Overflow

Mini-stream Ripper 3.0.1.1 - .asx HREF Local Buffer Overflow !/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow

!/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | ...

Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow

!/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | ...

HTML Email Creator 2.1b668 - html Local Overwrite (SEH)

/ :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator or or 520 | | NOPs jmp 11 pop-pop-ret NOPs shellcode NOPs 56 4 4 40 343 73 Greetz: suN8Hclf, str0ke...

CVE-2008-6682

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of 1 " double quote characters in the href attribute of an s:a tag and 2...

CVE-2008-6682

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of 1 " double quote characters in the href attribute of an s:a tag and 2...

VUPlayer .asx Playlist File Buffer Overflow Vulnerability

This host is installed with VUPlayer and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvuplayerasxplaylistbofvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ VUPlayer .asx Playlist File Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

KDE Konqueror DoS

Memory exhaustion on oversized SRC and HREF parameters...

VUPlayer 2.49 .ASX File (HREF) Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================ VUPlayer 2.49 .ASX File HREF Universal Buffer Overflow Exploit ================================================================ usage: exploit.py print "" print " VUPlayer 2.49...

VUPlayer 2.49 .ASX File (HREF) Universal Buffer Overflow Exploit

No description provided by source. usage: exploit.py print "" print " VUPlayer 2.49 .ASX File HREF Universal Buffer Overflow\n" print " Founder: aBo MoHaMeD" print " exploit code: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n"...

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

usage: exploit.py print "" print " VUPlayer 2.49 .ASX File HREF Universal Buffer Overflow\n" print " Founder: aBo MoHaMeD" print " exploit code: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print "" header1 =...

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

!/usr/bin/perl intro; does not need a thread method shellcode to run as best as can. seh work great too! win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...