UPDATED: Mass Attacks Exploiting 0-Day in Microsoft Video DLL

There is a widespread attack underway against an unpatched vulnerability in the Msvidctl DLL, with attackers using thousands of newly compromised Web sites to exploit victims’ PCs via drive-by downloads. The attacks are using Internet Explorer as the attack vector and are pushing a Trojan...

暴风影音（BaoFeng Storm）播放文件缓冲区溢出漏洞

暴风影音是在中国非常流行的万能多媒体播放软件。 暴风影音的medialib.dll库在处理smpl播放列表文件时存在栈溢出漏洞，用户受骗打开了包含有超长路径的播放列表文件就会触发这个溢出，导致执行任意指令。 .text:1000567B ; int stdcall sub1000567BLPCWSTR pszUrl,DWORD pcchPath .text:1000567B sub1000567B proc near ; DATA XREF: .rdata:100248D4 o .text:1000567B .text:1000567B FileName = word ptr -628h...

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow (PoC)

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow PoC source: https://www.securityfocus.com/bid/35512/info BaoFeng Storm is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to...

BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/35512/info BaoFeng Storm is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm ActiveX and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormactivexctrlbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyrigh...

BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

BaoFeng Storm ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Serious new flaw found in IIS 6.0

A new remotely-exploitable vulnerability has been found in the Microsoft IIS 6.0 Web server. The flaw is quite similar to one that was discovered eight years ago in earlier versions of IIS, and exploitation of the weakness could enable an attacker to upload content to the vulnerable server. The...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612

BaoFeng Storm ActiveX control (MPS.StormPlayer.1 in mps.dll) is affected by a stack-based buffer overflow (CVE-2009-1612). Vulnerable component: mps.dll 3.9.4.27 and earlier; condition arises when an overly long string is passed to OnBeforeVideoDownload. Consequence: remote code execution by an a...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

VulnCheck KEV: CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

SW-HTTPD Server 0.x Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ==================================================== SW-HTTPD Server 0.x Remote Denial of Service Exploit ==================================================== / SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100...

SW-HTTPD Server 0.x - Remote Denial of Service

SW-HTTPD Server 0.x - Remote Denial of Service / SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100 HTTP/1.1 After server not found all pages. Author: Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org / include "stdio.h" include "unistd....

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

DEBIAN-CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

Code injection

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2008-6383

CVE-2008-6383 affects the SpeedTech Storm module for Drupal. The vulnerability is a SQL injection in Storm 5.x (before 5.x-1.14) and 6.x (before 6.x-1.18) that allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors. The sources consis...

Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes

No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...