KLA10097 WLF vulnerability in CDBurnerXP

An unspecified vulnerability was found in CDBurnerXP. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited from the network at a point related to NMS DVD Burning SDK. Original advisories vulnerability description Exploitation Public...

KLA10063 ACE vulnerability in Avira

A nonsecure function call vulnerability was found in Avira. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to the scheduler via a specially designed .exe file. Original advisories detailed description...

KLA10079 ACE vulnerability in Aurigma Image Uploader

A buffer overflow vulnerability was found in the Aurigma Image Uploader ActiveX control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via specially designed properties...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit ============================================================== !/usr/bin/python IBM Tivoli Storage Manager Express...

KLA10057 ACE vulnerability in Servant Salamander

A buffer overflow vulnerability was found in Servant Salamander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to peviewer.spl via a specially designed PE file. Original advisories vulnerability...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode (Perl)

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Perl !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$A...

Asterisk <= 1.0.12 / 1.2.12.1 (chan_skinny) Remote Heap Overflow (PoC)

No description provided by source. !/usr/bin/perl Beyond Security Copyright Noam Rathaus [email protected] The following proof of concept causes the chanskippy to crash in different locations and due to memory corruption as well as double free calls, this is based on the finding of...

KLA10134 DoS vulnerability in IBM DB2

An unspecified vulnerability was found in the IBM DB2 Universal Database. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to INSO services or db2fmp processes. Original advisories - Related...

CA BrightStor ARCserve Backup - 'dsconfig.exe' Remote Buffer Overflow

/ CA BrightStor ARCserve Backup Buffer Overflow - dsconfig.exe cybertronicatgmxdotnet / include include include include define PORT 41523 unsigned char bindshell = "\xeb\x19\x5e\x31\xc9\x81\xe9\x89\xff\xff\xff\x81\x36\x80\xbf\x32" "\x94\x81\xee\xfc\xff\xff\xff\xe2\xf2\xeb\x05\xe8\xe2\xff\xff\xff"...

KLA10130 ACE vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server response. Original advisories - Related products CuteFTP-5-XP CVE list CVE-2003-1260 high...

Using Java from Javascript

Opera and Netscape browsers allow you to include java methods calls in your javascript . As Javascript has support for objects you can use objects returned by these calls in your scripts . I have been looking for information about the possibly security implications and vulnerabilities published...

Apple Mac OSX 10 - nidump Password File Disclosure

Apple Mac OSX 10 - nidump Password File Disclosure source: https://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is ...

Cisco HSRP - Denial of Service

source: https://www.securityfocus.com/bid/2684/info Hot Standby Routing Protocol is an Internet Protocol based routing protocol implemented by Cisco Systems. It is designed to offer traffic rerouting services to networks when one router within a pool ceases to operate, and users of the network...

BizDB bizdb-search.cgi Arbitrary Command Execution

BizDB is a web database integration product using Perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the web server. The variable is dbname, and if passed a semicolo...

ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery

ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists ...