CVE-2010-2158

The CVE-2010-2158 entry describes XSS vulnerabilities in the Drupal Storm module (versions 5.x and 6.x prior to 6.x-1.33). The issue is triggered by user-supplied values in the stormperson action, specifically the parameters fullname, phone, or im, which can be exploited by remote authenticated u...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

CVE-2010-2123

Multiple cross-site scripting XSS vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the 1 fullname, 2 address, 3 city, 4 provstate aka state, 5 phone, or 6 taxid...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the 1 fullname, 2 address, 3 city, 4 provstate aka state, 5 phone, or 6 taxid...

CVE-2010-2123

The CVE-2010-2123 entry describes multiple XSS vulnerabilities in Drupal’s Storm module (5.x and 6.x) prior to 6.x-1.33. The root cause is improper handling of user-supplied input in stormorganization, stormperson, stormtask, stormticket, and stormproject actions (via parameters such as fullname,...

CVE-2010-2123

Multiple cross-site scripting XSS vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the 1 fullname, 2 address, 3 city, 4 provstate aka state, 5 phone, or 6 taxid...

Solaris/x86 - Remote Download file - 79 bytes

Solaris/x86 - Remote Download file - 79 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Remote Download file - 79 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...

Linux/x86 - Disable randomize stack addresse - 106 bytes

Linux/x86 - Disable randomize stack addresse - 106 bytes. Shellcode exploit for linux platform / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set randomizevaspace to zero Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Databas...

Yahoo voting page storm directory-vulnerability warning-the black bar safety net

Copy to the browser, access ! Note: starting timi...

solaris/x86 - execve("/bin/sh","/bin/sh",NULL) - 27 bytes

Exploit for solaris/x86 platform in category shellcode ========================================================= solaris/x86 - execve"/bin/sh","/bin/sh",NULL - 27 bytes ========================================================= / Title: Solaris/x86 - execve"/bin/sh","/bin/sh",NULL - 27 bytes Autho...

SA-CONTRIB-2010-054 - Storm - Cross Site Scripting (XSS)

The Storm project provides a group of modules for project management and billing. The module displays data entered by users without sanitising it, allowing for a cross site scripting XSS attack that may lead to a malicious user gaining full administrative access. Versions affected Storm project f...

Drupal Storm 1.32 Cross Site Scripting

Drupal Storm module is a CRM type module that allows you to make orgs, people, tasks, and project. It is used on thousands of sites according to http://drupal.org/project/usage/storm. Storm version 1.32 have a lots of cross site scripting vulns. Sploits - Make or view a Storm organization at...

BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability

BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability Vulnerable: Storm2012 3.10.4.21 Storm2012 3.10.4.16 Storm2012 3.10.4.8 Storm2012 3.10.3.17 Storm2012 3.10.2.5 Storm2012 3.10.1.12 Other versions also may be affected Vendor: www.baofeng.com 1 Software Description: BaoFeng Storm is ve...

BaoFeng Storm media player buffer overflow

Buffer overflow on .m3u playlists parsing...

Storm the latest 0DAY_2010. 0 5. 0 6-vulnerability warning-the black bar safety net

From:digua Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit EDB-ID: 1 2 5 1 6 CVE-ID: OSVDB-ID: Author: Lufeng Li and Qingshan Li Published: 2010-05-06 Verified: no Download Exploit Code Download N/A view sourceprint?!/ usr/bin/env python Title: BaoFeng Storm M3U File Processing...

暴风影音2012 M3U文件解析缓冲区溢出漏洞

No description provided by source. !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file...

BaoFeng Storm M3U Buffer Overflow

BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability Vulnerable: Storm2012 3.10.4.21 Storm2012 3.10.4.16 Storm2012 3.10.4.8 Storm2012 3.10.3.17 Storm2012 3.10.2.5 Storm2012 3.10.1.12 Other versions also may be affected Vendor: www.baofeng.com 1 Software Description: BaoFeng Storm is ve...

BaoFeng Storm M3U File Processing Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= BaoFeng Storm M3U File Processing Buffer Overflow Exploit ========================================================= !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffe...

BaoFeng Storm - .m3u File Processing Buffer Overflow

BaoFeng Storm - .m3u File Processing Buffer Overflow !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open th...

BaoFeng Storm - '.m3u' File Processing Buffer Overflow

!/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file Platform: Windows XPSP3 Chinese Simplifie...