IE 6.0 - Local Crash Exploit

No description provided by source. Spot the difference: 5QIM 2.0.0.9 IE Crash Exploit 2008-02-25 08:26 object id="xiaonei" classid="clsid:5C56F4A7-71FC-4FFD-A9D7-18FB87A9DFC6" style="display:none;" /object script function crash var buff = ''; fori=0;i=5000;i++ buff+="AAAAAAAAAA"; object =...

Free Real Estate Contact Form 1.09 - Local File Inclusion

Free Real Estate Contact Form 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

BS.Player v2.51 build 1022 Remote Buffer Overflow Vulnerability

Exploit for unknown platform in category remote exploits =============================================================== BS.Player v2.51 build 1022 Remote Buffer Overflow Vulnerability =============================================================== Summary: Ever since the very beginning in the ye...

VLC Media Player 1.0.5 Goldeneye Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ======================================================= VLC Media Player 1.0.5 Goldeneye remote buffer overflow ======================================================= VLC media player 1.0.5 Goldeneye bookmarks Remote Buffer Overflow PoC...

BS.Player v2.51 build 1022 (Media Library) Remote Buffer Overflow Vulnerability

Summary Ever since the very beginning in the year 2000, the BS.Player™ has been one of the world's most popular video players. It is popular for many reasons. One however should be pointed out: BS.Player™ is the first software movie player ever to enable its users to focus on watching the movie...

VLC media player 1.0.5 Goldeneye (bookmarks) Remote Buffer Overflow PoC

Summary VLC media player is a highly portable multimedia player and multimedia framework capable of reading most audio and video formats MPEG-2, MPEG-4, H.264, DivX, MPEG-1, mp3, ogg, aac ... as well as DVDs, Audio CDs VCDs, and various streaming protocols. Description VLC media player is...

ExtCalendar 2.0 Beta 2 (upgrade.php) Remote XSS Vulnerability

Summary ExtCalendar is a powerful multi-user web-based calendar application. Features include Multi-Languages, Themes, Recurrent Events, Categories, Users and Groups management, Environment and General Settings, Template Configuration, Product Updates. Description ExtCalendar is prone to a...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

No description provided by source. !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

Nero Burning ROM 9 Buffer Overflow

!/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

WampServer 2.0i (index.php) Remote Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ===================================================================== WampServer 2.0i index.php Remote Cross Site Scripting Vulnerability =====================================================================...

WampServer 2.0i Cross Site Scripting

---------------------------------------------------------------- Title: WampServer 2.0i index.php Remote Cross Site Scripting Vulnerability Summary: WampServer - Apache, PHP, MySQL on Windows Product web page: http://www.wampserver.com Current version: 2.0i Vulnerability discovered by Gjoko...

Nero Burning ROM 9 (iso compilation) Local Buffer Invasion Proof Of Concept

Summary Nero Burning ROM is the professional solution for burning your audio, data, and video discs, backing up entire discs, and much more. Features many advanced settings and options and supports a wide range of formats. Description Nero Burning ROM suffers from a buffer overflow vulnerability...

WampServer 2.0i (index.php) Remote Cross Site Scripting Vulnerability

Summary WampServer - Apache, PHP, MySQL on Windows. Description WampServer is susceptible to cross-site scripting vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input. An attacker may leverage any of the cross-site scripting issues to have arbitra...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

Exploit for unknown platform in category dos / poc ====================================================================== Nero Burning ROM v9.4.13.2 iso compilation Local Buffer Invasion PoC ====================================================================== !/usr/bin/perl Title: Nero Burning...

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion (PoC)

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion PoC !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English...

CableTEL's Triple Play v1.0 (login.php) Remote Login Bypass SQL Injection Vuln

Summary Triple Play is a PHP script that CableTEL offers its clients to check their internet traffic status. Description Triple Play suffers from a security bypass vulnerability login.php with sql injection attack. The login page can be accessed only by CableTEL's users. The script fails to...

On The Way to Better Malware Testing

Have you ever found a false positive when uploading a file to a website like VirusTotal? Sometimes it happens that not just one scanner detects the file, but several. This leads to an absurd situation where every product which doesn’t detect this file automatically looks bad to users who don’t...

The 2010 Threat Landscape

Costin Raiu, chief security expert at Kaspersky Lab in Romania, discusses the state of the threat landscape for the year ahead, including botnets, malicious PDFs and targeted attacks. Please note: Raiu is referring to media reports that attackers may have stolen some of Adobe’s source code. Adobe...

[slackware-security] php

New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3557 https://vulners.com/cve/CVE-2009-3558...

{PRL} Novell Netware CIFS And AFP Remote Memory Consumption DoS

Application: Novell Netware CIFS And AFP Remote Memory Consumption DoS Platforms: Novell Netware 6.5 SP8 Crash: YES Exploitation: Remote DoS Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://protekresearch.blogspot.com/ 1...