HTC Touch - vCard over IP Denial of Service

!/usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

Multiple Kaspersky Lab applications privilege escalation

Access to kernel memory regions from usermode on IOCTL processing...

Amaya Web Editor 11 Remote SEH Overwrite Exploit

Summary Amaya is a Web editor, i.e. a tool used to create and update documents directly on the Web. Description Amaya Web Editor is prone to a buffer overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage these issue...

SonyEricsson WAP Push Denial of Service

Security Advisory MSL-2008-001 - SonyEricsson WAP Push Denial of Service Advisory Information -------------------- Title: SonyEricsson WAP Push Denial of Service Advisory ID: MSL-2008-001 Advisory URL: http://www.mseclab.com/index.php?pageid=123 Published: 2009-01-26 Updated: 2009-01-26 Vendor:...

WFTPD Pro Server 3.30.0.1 (pre auth) Multiple Remote Denial of Service Vulnerabilities

Summary Professional FTP server for Windows NT / 2000 / XP / 2003. Description WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are vulnerable including: LIST, MLST, NLST, NLST -al, STAT and maybe more. This issue is...

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

Overview A vulnerability in the Microsoft SQL Server spreplwritetovarbin extended stored procedure could allow an authenticated attacker to execute arbitrary code on an affected server. Description Some versions of Microsoft SQL Server contain a vulnerability in the spreplwritetovarbin stored...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found on the Mozilla site: http://www.mozilla.org/security/known-vulnerabilities/thunderbird20.html Here are the details from the Slackwar...

Pi3Web <= 2.0.3 (ISAPI) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== Pi3Web Mapping Tab. 2. Delete the users.txt, inst...

System Requirements Lab Software Client Detection

Binary data 4741.prm...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Summary KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted developers around the world. Description KVIrc is prone to a remote format-string vulnerability...

CVE-2008-4385

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in 1 a certain ActiveX control sysreqlab2.cab, sysreqlab.dll,...

CVE-2008-4385

Husdawg, LLC System Requirements Lab ActiveX control (sysreqlab*.dll) and Java applet RLApplet.class in sysreqlab2.jar/sysreqlab.jar allow remote arbitrary code execution via an unsafe Init path. The root cause is a design that lets a malicious website trigger download and execution of arbitrary ...

CVE-2008-4385

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in 1 a certain ActiveX control sysreqlab2.cab, sysreqlab.dll,...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...

Flock Social Web Browser 1.2.5 (loop) Remote Denial of Service Exploit

Summary Flock is a browser. The people here at Flock are committed to building a browser unlike anything you’ve ever experienced before - because we start by focusing on user needs. We take pride in solving for common behaviors on the Web that seem clunky today, and will seem ridiculous tomorrow...

Google Chrome Browser 0.2.149.27 Denial of Service Exploit

Summary Google Chrome is a web browser that runs web pages and applications with lightning speed. Description An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 0.2.149.27. A crash can result without user interaction. When a user is made to visit a malicious link,...

Unfixed XSS vulnerability at www.electronics-lab.com

Security researcher SaMTHG, has submitted on 25/08/2008 a cross-site-scripting XSS vulnerability affecting www.electronics-lab.com, which at the time of submission ranked 42442 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is...

VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit

Summary VUPlayer is a freeware multi-format audio player for Windows. Description VUPlayer 2.49 suffers from a buffer overflow vulnerability that can be exploited remotely using user interaction and/or crafting. It fails to perform adequate boundry checking of the user input file .m3u playlist,...