Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow Vulnerability

No description provided by source. !/usr/local/bin/perl Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.2.6.8491 Standalone Summary: TRAKTOR PRO is the new...

Novell Groupwise Internet Agent Stack Overflow

No description provided by source. Application: Novell Groupwise Internet Agent Stack Overflow Platforms: Windows, Linux, Netware GroupWise 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, 8.01x Exploitation: Remote code execution CVE Number: Novell TID: 7006374 Author: Francis Provencher Protek Research Lab's...

Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution

No description provided by source. Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's...

ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability

No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...

Family Connections CMS 2.3.2 (POST) Stored XSS And XML Injection

No description provided by source. !-- Family Connections CMS 2.3.2 POST Stored XSS And XML Injection Vendor: Ryan Haudenschilt Product web page: http://www.familycms.com Affected version: 2.3.2 Summary: Family Connections is an open source content management system. It makes creating a private,...

IrfanView RLE Image Decompression Buffer Overflow Vulnerability

No description provided by source. Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

No description provided by source. Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits:...

DreamBox DM500(+) - Arbitrary File Download Vulnerability

No description provided by source. DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected version: DM500, DM500+, DM500HD and DM500S Summary: The Dreambox is a series of Linux-powered DVB satellite,...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability

No description provided by source. Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3...

MantisBT <= 1.2.3 (db_type) - Local File Inclusion Vulnerability

No description provided by source. MantisBT =1.2.3 dbtype Local File Inclusion Vulnerability Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: 1.2.4 Summary: MantisBT is a free popular web-based bugtracking system. It is written in the PHP scripting language and...

Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC

No description provided by source. / Title: Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 4.1.3.4125 Standalone Summary: KONTAKT 4 PLAYER is the free sample...

acontent 1.1 - Multiple Vulnerabilities

No description provided by source. AContent 1.1 Multiple SQL Injection Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to...

Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities

No description provided by source. Title: ------ Adobe Photoshop Elements 8.0 Multiple Arbitrary Code Execution Vulnerabilities Vendor: ------- Adobe Systems Inc. http://www.adobe.com Product web page: ----------------- http://www.adobe.com/products/photoshop-elements.html Affected version:...

Cool PDF Reader 3.0.2.256 Buffer Overflow

No description provided by source. Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis...

Husdawg, LLC. System Requirements Lab ActiveX Unsafe Method

No description provided by source. $Id: systemrequirementslabunsafe.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

ACDSee PRO 5.1 RLE Image Processing Heap Overflow

No description provided by source. Application: ACDSee PRO RLE Image Processing Heap Overflow Platforms: Windows Secunia: SA48804 PRL: 2012-22 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

ManageEngine ServiceDesk Plus 8.0 - Multiple Stored XSS Vulnerabilities

No description provided by source. ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help desk requests and...

Microsoft Office XP Remote code Execution

No description provided by source. Application: Microsoft Office XP Remote code Execution Platforms: Windows Vista Exploitation: Remote code execution CVE Number: Microsoft Bulletin: PRL: 2011-07 Author: Francis Provencher Protek Research Lab's WebSite: http://www.protekresearchlab.com/ Twitter:...

Adobe Photoshop 12.1 Tiff Parsing Use-After-Free

No description provided by source. Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical detail...

Corel PHOTO-PAINT X3 13.0.0.576 - DLL Hijacking Exploit (crlrib.dll)

No description provided by source. / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3...