Crystal Player Playlist File Buffer Overflow Vulnerability

Crystal Player belongs to the shell class of playback software, you can call the Windows MediaPlayer decoder for media playback, it can support all the formats supported by Windows MediaPlayer, but also supports Skin technology. A buffer overflow vulnerability exists in Crystal Player playlist...

WinAmp-5.63-(winamp.ini)

I tried an alpha3 encoded egghunter but could not fit it in a single buffer and unfortunately it did not work, it wrote an invalid address on the stack then tried to access it If you can make it work or find a solution for ASLR/DEP please contact me So I wrote from scratch a venetian shellcode th...

SkinCrafter3_vs2010 ActiveX Exploit

The vulnerability lies in the COM component used by the product SkinCrafter3vs2010.dll Description: Skin Crafter is a software that is used to create custom skins for different windows applications. SkinCrafter is compatible with Windows XP / Vista / 7 / 8 and earlier versions. ActiveX Buffer...

SkinCrafter3_vs2008 ActiveX Exploit

The vulnerability lies in the COM component used by the product SkinCrafter3vs2008.dll Description: Skin Crafter is a software that is used to create custom skins for different windows applications. SkinCrafter is compatible with Windows XP / Vista / 7 / 8 and earlier versions. ActiveX Buffer...

[SECURITY] Fedora 20 Update: gnurobbo-0.66-4.20141028svn412.fc20

GNU Robbo is a free open source port of Janusz Pelc's Robbo which was distributed by LK Avalon in 1989. Features + Graphical skin support: Oily, Original and Tronic + Sound skin support: Default, Free and Oily + Support for user supplied music + 1113 levels across 28 packs converted from Robbo an...

Information disclosure

The Skin&Ink Magazine aka com.triactivemedia.skinandink application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7713

The Skin&Ink Magazine aka com.triactivemedia.skinandink application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7713

The CVE-2014-7713 entry concerns the Skin&Ink Magazine Android app (com.triactivemedia.skinandink) identified as @7F08017A. The root cause is the app’s lack of SSL certificate verification for server connections, which enables man-in-the-middle attackers to spoof legitimate servers and potentiall...

CVE-2014-7713: Undefined Security Weakness

The Skin&Ink Magazine aka com.triactivemedia.skinandink application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7604

CVE-2014-7604 affects the Android app “Easy Tips For Glowing Skin” (package com.n.easytipsforglowingskin), version 1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-7604: Undefined Security Weakness

The Easy Tips For Glowing Skin aka com.n.easytipsforglowingskin application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5991

The Skin Conditions and Diseases aka com.appsgeyser.wSkinConditions application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5991

The CVE-2014-5991 entry concerns the Android app Skin Conditions and Diseases (com.appsgeyser.wSkinConditions) version 2.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and access sensitive...

CVE-2014-5991: Undefined Security Weakness

The Skin Conditions and Diseases aka com.appsgeyser.wSkinConditions application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Microsoft Windows Media Player 7.1 Skin File Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7517/info Windows Media Player is vulnerable to code execution through skin files. WMP does not properly validate URLs that are passed to initiate a skin file download and installation. This could allow a malicious file...

AJ Auction Authentication - Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Cedric Email Reader 0.2/0.3 Skin Configuration Script Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6818/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the 'email.php' script. Under som...

CoolPlayer Portable 2.19.1 - (Skin) Buffer Overflow Exploit

No description provided by source. CoolPlayer Portable 2.19.1 Skin Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 By Stack Sysworm.com Note abouts this Exploit : right click Option Open select our target file and boooooom calc executed :d Note abouts the last exploit...

BS.Player 2.51 - SEH Overwrite Vulnerability

No description provided by source. BS.Player v2.51 Software Link: http://www.bsplayer.com/bsplayer-english/download-free.html SEH Overwrite Vulnerability http://www.mertsarica.com junk = Options\nSkin= vulnerability = junk + \x41496 + \x424 + \x434 try: vulnerable = openvulnerable.bsi,'w'...

@lex Guestbook <= 4.0.2 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php // | | header @lex Guestbook = 4.0.2 Remote Command Execution Exploit | header ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor |...