CVE-2009-3734: Undefined Security Weakness

Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service configuration reset via a request to a crafted URI...

S2 Security Netbox/Linear eMerge Access Control System management component vulnerable to unauthenticated factory reset

Overview The S2 Security Netbox/Linear eMerge Access Control System management console allows an unauthenticated attacker to perform a factory reset of the management system. Description Linear eMerge is an IP-enabled security management and access control system. The product is distributed by...

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to...

Live For Speed S2 - Duplicate Join Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to restart races on vulnerable servers, resulting in a denial-of-service...

Apache Struts Security Update (S2-004) - Active Check

Apache Struts is prone to a directory traversal vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Unfixed XSS vulnerability at s2.gladiatus.us

Security researcher Saime, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting s2.gladiatus.us, which at the time of submission ranked 6664 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

Unfixed XSS vulnerability at s2.gladiatus.lt

Security researcher Saime, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting s2.gladiatus.lt, which at the time of submission ranked 43361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

CVE-2007-4426

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

CVE-2007-4425: Undefined Security Weakness

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bugs: A nickname buffer-overflow B partial track buffer-overflow C NULL pointer access in internet/hidden S1/S2 servers D memcpy NULL pointer in internet/hidden S1/S2 servers Exploitation: remote,...

lfs2-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to get it to point to our shell code,The .spr file's are...

CVE-2007-4257: Undefined Security Weakness

Multiple buffer overflows in Live for Speed LFS S1 and S2 allow user-assisted remote attackers to execute arbitrary code via 1 a .spr file single player replay file containing a long user name or 2 a .ply file containing a long number plate string, different vectors than CVE-2007-4140...

lfs3-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .ply File buffer over flow Live for speed .ply file is a set up file,This file is shared amongst user's Who want stylish number plate's on there car's the buffer over flow happened with An overly long number plate string inside the .ply file.So ...

Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= Live for Speed S1/S2/Demo .spr file Buffer Overflow Exploit ============================================================= / 0day Live for speed patch x s2 /s1 and demo local .Spr...

CVE-2007-4140

Buffer overflow in Live for Speed LFS S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file replay file that contains a long car name...

CVE-2007-4140

CVE-2007-4140 : Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows remote attackers to execute arbitrary code via a replay file (.mpr) containing a long car name. The vulnerability is due to an overflow in the replay file handling. Exploitation details or patches are not provided ...

CVE-2007-4140: Undefined Security Weakness

Buffer overflow in Live for Speed LFS S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file replay file that contains a long car name...

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

Unfixed XSS vulnerability at s2.gladiatus.net

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting s2.gladiatus.net, which at the time of submission ranked 174969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...