MPlayer sdpplin_parse() Array Indexing Buffer Overflow Exploit PoC

No description provided by source. !/usr/bin/perl Huston, mplayer got some vulns! : CVE-2008-0073 also apply to mplayer and vlc with some distinctions. Assuming kernel.varandomize=0 this overwrite EIP with a "stream" structure on my box...

Buffer overflow

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

Motorola Timbuktu Pro 8.6.5/8.7 - Directory Traversal / Log Injection

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204 Advisory URL: http://www.coresecurity.com/?action=item&id=2166 Date published: 2008-03-11 Date of last update: 2008-03-11...

Debian: Security Advisory (DSA-1495-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information the Java Web...

Debian DSA-1495-1 : nagios-plugins - buffer overflows

Several local/remote vulnerabilities have been discovered in two of the plugins for the Nagios network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5198 A buffer overflow has been discovered in the parser for HTT...

Out-of-bounds

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

CVE-2008-0767: Undefined Security Weakness

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service daemon crash via a large integer in this field in a packet to the Servic...

ExtremeZ-IP Multiple Remote Flaws

Binary data 4371.prm...

CVE-2008-0488

Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter...

WordPress Plugin Adserve 0.2 - adclick.php SQL Injection

WordPress Plugin Adserve 0.2 - adclick.php SQL Injection getvar"SELECT url FROM $tablename WHERE id=$id;"; Exploit id variable isnt filtered so we can inject and check the output in the Location response-header If exploit is succesfull Wordpress administrators login and md5 hashed password is...

Windows 9x/NT/2k/XP PEB method 31 bytes

No description provided by source. / 004045F4 6A 30 PUSH 30 004045F6 59 POP ECX 004045F7 64:8B09 MOV ECX,DWORD PTR FS:ECX 004045FA 85C9 TEST ECX,ECX 004045FC 78 0C JS SHORT OllyTest.0040460A 004045FE 8B49 0C MOV ECX,DWORD PTR DS:ECX+C 00404601 8B71 1C MOV ESI,DWORD PTR DS:ECX+1C 00404604 AD LODS...

Mozilla Foundation Security Advisory 2007-39

Mozilla Foundation Security Advisory 2007-39 Title: Referer-spoofing via window.location race condition Impact: High Announced: November 26, 2007 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description Gregory Fleischer demonstrated that it...

Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information the Java Web...

Lianzhong ConnectAndEnterRoom ActiveX stack overflow vulnerability(exp)-vulnerability warning-the black bar safety net

exeurl = InputBox "please input the download execution exe of the address:", "input","" 'code by NetPatch if exeurl "" then...

DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability

No description provided by source. ======================================================================== || || || || || || || || || &nb...

DevMass Shopping Cart 1.0 - Remote File Inclusion

======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== DevMass Shopping Cart = 1.0 Remote File...

coolkey security and bug fix update

1.1.0-5 - 1777 is not octal and does not set the correct bits should be 01777 1.1.0-4 - fix cache location to be more secure 1.1.0-3 - replace the install stuff 1.1.0-2 - Back out RHEL-4 version of spec from CVS, add pcsc-lite-lib requires. 1.1.0-1 - Pick up lates release...

CVE-2007-5928

OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear...