MP3 Studio 1.0 - (.mpf) Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've used address...

InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Zoner Photo Studio 15 Build 3 (Zps.exe) - Registry Value Parsing Exploit

No description provided by source. !/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link: http://www.zoner.com Tested on...

Omnis Studio 2.4 Weak Database Field Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1255/info Omnis Studio 2.4 is a development tool for creating database applications. The tool gives developers the option to encrypt database entries. However, the encryption scheme used is weak and easily broken with any...

BTD Studio Zom-Mail 1.0.9 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 256 chars long file...

FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

No description provided by source. Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be...

Camtasia Studio 4.0.2 'csPreloader' Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27107/info Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the applicatio...

Cytel Studio <= 9.0.0 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Cytel Studio: StatXact / LogXact / CrossOver http://www.cytel.com/Software/LogXact.aspx http://www.cytel.com/Software/StatXact.aspx http://www.cytel.com/Software/Crossover.aspx Versions: = 9.0.0 Platforms: Windows Bugs: A strings stac...

MP3 Studio 1.x - (.m3u File) Local Stack Overflow (Universal)

No description provided by source. !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Universal Date: 01/20/2010 Author: D3V!L FUCKER Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP2 , SP3 Greetz 2 : THE...

WordPress WP App Maker Plugin <= 1.0.16.4 - XSS

Because of this vulnerability in asset-studio/icons-launcher.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to 1 preview.swf, 2 previewskinrouge.swf, 3 previewallchars.swf, or 4 previewskinoverlay.swf...

WordPress DZS Video Gallery Cross Site Scripting / Content Spoofing

Hello list! There are Content Spoofing and Cross-Site Scripting vulnerabilities in plugin DZS Video Gallery for WordPress. After I announced multiple vulnerabilities in DZS Video Gallery at 08.05.2014 and informed developers, they ignored it, so the second advisory is going directly to full...

MS KB2927432: Visual Studio Update 2 for Debug Interface Access SDK

The version of the Microsoft Debug Interface Access Library on the remote host is affected by a memory corruption vulnerability related to parsing PDB files. An attacker could exploit this issue by tricking a user into loading a malicious file. This could allow an attacker to execute arbitrary co...

CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-3802

The CVE-2014-3802 issue affects msdia.dll (Microsoft Debug Interface Access Library) in Visual Studio prior to 2013. The root cause is a failure to validate an unspecified variable when calculating a dynamic-call address while parsing PDB files, leading to memory corruption. Impact per sources: r...

CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

InduSoft Web Studio < v7.1 + SP2 + P2 Security System Vulnerability

Binary data 8260.prm...

InduSoft Web Studio Thin Client Detection

Binary data 8033.prm...

InduSoft Web Studio NTWebServer < v7.1 + SP2 + P4 Directory Traversal Vulnerability

Binary data 8032.prm...

InduSoft Web Studio Directory Traversal (CVE-2014-0780)

A directory traversal vulnerability has been reported in InduSoft Web Studio. The vulnerability is due to insufficient validation of certain requests while using the development web server. An unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable...