Joomla Component joomlaradio 5.0 - Remote File Inclusion Vulnerability

No description provided by source. Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:comjoomlaradiov5 Exampl...

PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit

No description provided by source. / GNU PeerCast = v0.1216 Remote Exploit ====================================== PeerCast is a simple, free way to listen to radio and watch video on the internet. A remotely exploitable buffer overflow has been identified by INFIGO-2006-03-01 which can be...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

No description provided by source. $Id: aolampxconvertfile.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection Vulnerability

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Joomla CB Resume Builder - SQL Injection

No description provided by source. / Joomla Component comcbresumebuilder Remote SQL injection vulnerability - groupid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 5, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information +...

Destiny Media Player 1.61 0 (.m3u File) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/perl -w Program : Destiny Media Player Version : 1.61.0 website : http://www.pirateradio.com/downloads/ Download : http://www.pirateradio.com/downloads/destinymp3.exe Type : .m3u File local Stack Overflow PoC EAX 61616161 ECX 00000001 EDX 014377A0 EBX...

CVE-2013-4860

The CVE-2013-4860 issue affects Radio Thermostat CT50/CT80 units with firmware 1.4.64 and earlier, where the Local HTTP/API did not require authentication, enabling remote attackers on the same network to modify operation mode, WiFi settings, temperature thresholds, and other settings via unspeci...

PT-2014-2874

Name of the Vulnerable Software and Affected Versions Radio Thermostat CT80 and CT50 versions 1.4.64 and earlier Description The issue allows remote attackers to change various settings, including operation mode, wifi connection settings, temperature thresholds, and other settings, due to a lack ...

CVE-2013-4860: Undefined Security Weakness

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors...

CVE-2012-1561

Cross-site scripting XSS vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."...

CVE-2012-1561

Cross-site scripting XSS vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."...

CVE-2012-1561: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."...

PT-2014-2232

Name of the Vulnerable Software and Affected Versions Drupal module Finder versions 6.x-1.x before 6.x-1.26 Drupal module Finder versions 7.x-1.x Drupal module Finder versions 7.x-2.x before 7.x-2.0-alpha8 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject...

wireshark: RLC dissector crash (wnpa-sec-2014-03)

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service use-after-free error and application crash via a crafted UMTS Radio Link Control...

wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49)

epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service loop via a crafted packet that is not properly handled by the GSM RR dissector...

Android Malware Mines Digital Cryptocurrency

On its surface, the idea of turning a smartphone into a cryptocurrency mining machine sounds novel. But practical and profitable? Not so much. That hasn’t stopped thieves from corrupting a number of popular Android applications for just that purpose, including two on the Google Play store called...

DEBIAN-CVE-2014-2283

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service use-after-free error and application crash via a crafted UMTS Radio Link Control...

CVE-2014-2283

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service use-after-free error and application crash via a crafted UMTS Radio Link Control...

Design/Logic Flaw

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service use-after-free error and application crash via a crafted UMTS Radio Link Control...

CVE-2014-2283

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service use-after-free error and application crash via a crafted UMTS Radio Link Control...