OvBB 0.16a - Multiple Local File Inclusions

OvBB 0.16a - Multiple Local File Inclusions OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle ...

RealNetworks RealPlayer Zipped Skin File Buffer Overflow (CVE-2005-2630)

There exists a heap buffer overflow vulnerability in RealNetworks RealPlayer Zipped Skin handling component. The vulnerability is caused by insufficient verification of size field values supplied in Zipped Skin files. An attack can exploit this vulnerability by enticing the victim to open a...

DDL CMS 2.1 Remote File Inclusion

============================================================== DDLCMS v2.1 skin Remote File Inclusion Vulnerability ============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

CVE-2010-2004

Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file .bsi, a different vulnerability than CVE-2009-1068...

CVE-2010-2004: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file .bsi, a different vulnerability than CVE-2009-1068...

Winamp 5.57 (Browser) IE Denial of Service Exploit

No description provided by source. !-- +---------------------------------------------------------------------------------+ Winamp 5.57 Browser IE Denial of Service Exploit Homepage: http://www.winamp.com/ Exploit Coded by: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg From: Indonesia Tested Win xpsp2 Greet...

Winamp 5.57 - Browser IE Denial of Service

Winamp 5.57 - Browser IE Denial of Service From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento, to open browser press ALT + X drag or load file to browser and keep smile : +---------------------------------------------------------------------------------...

CVE-2009-4246

Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary...

CVE-2009-4246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary...

RealPlayer皮肤和媒体文件解析多个缓冲区溢出漏洞

BUGTRAQ ID: 37880 CVE ID: CVE-2009-4241,CVE-2009-4242,CVE-2009-4243,CVE-2009-4244,CVE-2009-4245,CVE-2009-4257,CVE-2009-4248,CVE-2009-4247,CVE-2009-4246 RealPlayer是一款流行的多媒体播放器。 RealPlayer解析畸形的皮肤或媒体文件时存在多个缓冲区溢出漏洞，用户受骗打开了恶意的文件就可以触发这些漏洞，导致执行任意指令。 1...

ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability

ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-010 January 21, 2010 -- CVE ID: CVE-2009-4246 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a user must visit a malicious website or open a malicious file and accept a dialog to switch player skins. The specific flaw exists during parsin...

NPlayer - .dat Skin Local Heap Overflow (PoC)

NPlayer - .dat Skin Local Heap Overflow PoC !/usr/bin/perl Exploit Title:NPlayer .dat Skin File Local Heap Overflow PoC Date:13/01/2010 Author:Vulnerability Discovered By Rehan Ahmed [email protected] Tested On: WinXP SP2 EBX 41414141 ESP 0012EF6C EBP 00DA50F8 ASCII "C:\Program...

NPlayer (.dat Skin File) Local Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================ NPlayer .dat Skin File Local Heap Overflow PoC ================================================ !/usr/bin/perl Exploit Title:NPlayer .dat Skin File Local Heap Overflow PoC Date:13/01/2010...

Soritong v1.0 Universal BOF-SEH (META)

Metasploit version by FB1h2s,Orginal exploit by skullhaxor And greetz to corelanc0d3r team for all there cool tutorials, espesialy the Unicode one : This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework...

Soritong v1.0 Universal BOF-SEH (META)

Exploit for unknown platform in category local exploits ====================================== Soritong v1.0 Universal BOF-SEH META ====================================== Metasploit version by FB1h2s,Orginal exploit by skullhaxor And greetz to corelanc0d3r team for all there cool tutorials,...

n.player buffer overflow

Buffer overflow on skin file parsing...

Microsoft Windows Media Player Arbitrary File Download (MS03-017; CVE-2003-0228)

Microsoft Windows Media Player is an application that is used to play various media files, such as those compressed with AVI, MP3, MPG formats and so on. Windows Media Player runs on the Microsoft Windows operating system. Windows Media Player has the ability to change its user interface and...

CVE-2009-4473: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2, allow remote attackers to inject arbitrary web script or HTML via the 1 css, 2 eca, 3 id, and 4 skin parameters. NOTE: so...

DotNetNuke 2.0 <= 4.8.4 Skin Files Security Bypass Vulnerability

DotNetNuke is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotnetnuke:dotnetnuke";...