7174 matches found
A preliminary understanding of the stack overflow vulnerability-vulnerability warning-the black bar safety net
1. What is the stack for? The stack is a mechanism that computers use to pass arguments to the function, can also be used to put into local function variables, function return address, it's purpose is to give a program a convenient way to access specific function of the partial data and from the...
WebGate WinRDS 2.0.8 StopSiteAllChannel Stack Overflow Exploit
WebGate WinRDS version 2.0.8 suffers from a StopSiteAllChannel stack overflow vulnerability. WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability 0Day var buff1 = ""; var nops = ""; var buff2 = ""; for i=0;i128; i++ buff1 += "B"; nseh = "\xeb\x08PD...
Bsplayer 2.68 - HTTP Response Universal
Bsplayer 2.68 - HTTP Response Universal !/usr/bin/python ''' Bsplayer suffers from a buffer overflow vulnerability when processing the HTTP response when opening a URL. In order to exploit this bug I partially overwrited the seh record to land at pop pop ret instead of the full address and then...
WebGate Control Center Multiple Control Buffer Overflow Vulnerability
WebGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. A buffer overflow vulnerability exists in multiple controls in WebGate Control Center, which allows attackers to exploit the vulnerability to build malicious web...
MGASA-2015-0088 Updated e2fsprogs packages fix CVE-2015-1572
Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...
MGASA-2015-0061 Updated e2fsprogs packages fix CVE-2015-0247
Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...
SuSE 11.3 Security Update : flash-player, flash-player-gnome, flash-player-kde4 (SAT Patch Number 10287)
flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313 / CVE-2015-0315 / CVE-2015-0320 / CVE-2015-0322. - Memory corruption vulnerabilities that could lead to co...
Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability (CNVD-2015-00942)
Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified heap buffer overflow vulnerability that could allow an attacker to construct a malicious SWF file and trick a user into parsing it, which could be used in the context of an application to execute...
Oracle Solaris Third-Party Patch Update : gimp (cve_2012_2763_buffer_overflow)
The remote Solaris system is missing necessary patches to address security updates : - Buffer overflow in the readstrupto function in plug-ins/script-fu/tinyscheme/ scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a...
NotePad++ Buffer Overflow Vulnerability
NotePad++ is an open source editor that runs in the Windows environment and supports multiple programming languages. NotePad++ suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, whi...
Free-CD-to-MP3-Converter-3.1
Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe filename = 'crash.wav' windows/exec - 144 bytes http://www.metasploit.com Encoder: x86/shikataganai...
BulletProof FTP Client BPS Buffer Overflow Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'BulletProof FTP Client BPS Buffer Overflow', 'Description' = %q This module...
JVN#22440986: Multiple Allied Telesis products vulnerable to buffer overflow
AR Router Series and Alliedware switches provided by Allied Telesis Group contain a buffer overflow vulnerability CWE-788 due to a flaw when processing a POST method. Impact Arbitrary code may be executed when processing a specially crafted HTTP request. Solution Update the Firmware Update to the...
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...
IPUX CL5452/CL5132 IP Camera - 'UltraSVCamX.ocx' ActiveX Stack Buffer Overflow
IPUX CL5452/CL5132 IP Camera UltraSVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Bullet Type ICL5132 firmware: ICL5132 2.0.0-2 20130730 r1112 Bullet Type...
wins heap overflow vulnerability in the use of skills-vulnerability warning-the black bar safety net
newheap=HeapCreateaddHEAPGENERATEEXCEPTIONS,0x10000,0; i=int 0x7ffdf008; // wins.exe address; j=0; fork=0;k0x30000;k+=4 ifint i+k==sendadd VirtualProtectaddi+k&0xfffff000,0x1000,0x04,&l; int i+k=newcalladd; VirtualProtectaddi+k&0xfffff000,0x3000,l,&l; j^=0x1; // break; ifint i+k==closesocketadd...
Event tracking: Belkin router Belkin router）0day overflow vulnerability analysis-vulnerability warning-the black bar safety net
Vulnerability summary Security researcher Marco Vaz in Belkin n750 the model router found a serious vulnerability that can allow an attacker on the victim's device to get Root access permissions i.e. administrator privileges, the vulnerability of the main attacks is the router's Web...
MGASA-2014-0414 Updated lua and lua5.1 packages fix security vulnerability
A heap-based overflow vulnerability was found in the way Lua handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution CVE-2014-5461...
CVE-2014-3564
Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...
