Free WMA MP3 Converter 1.8 SEH Buffer Overflow

!/usr/bin/env python Free WMA MP3 Converter 1.8 SEH Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def littleendianaddress: return...

Supesite 前台注入之四 (select) 及一个小问题。

简要描述： 集齐了supesite的 Select Update insert delete 注入 准备召唤神兽了。 详细说明： 小问题 supesite 备份数据库的路径为 data/backupSAS2n5/141007Pwok71Ei-1.sql backup随机字符/日期随机字符.sql 但是这样的在win apache下 很容易用短文件名找到 写个字典 141007声称类似的时间 然后枚举就行了。 注入 batch.common.php $name = empty$GET'name'?'':trim$GET'name'; $cid =...

Sandworm（CVE-2 0 1 4-4 1 1 4 related to the threat of a comprehensive analysis of the report — and to chasing shadows Security Platform detection problem of the complex disk-vulnerability warning-the black bar safety net

1 threat card and introduction ! CVE-2 0 1 4-4 1 1 4 is in the OLE package Manager the INF arbitrary code execution vulnerability, the vulnerability affects Win Vista, Win7 and aboveoperating system, the attackers used PowerPoint as an attack vector, the vulnerability is in the Microsoft Windows...

CVE-2014-5847

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5847

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5847

CVE-2014-5847 affects the Android app Big Win Slots - Slot Machines (com.gosub60.BigWinSlots), version 1.11.2. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Exp...

PT-2014-6832

Name of the Vulnerable Software and Affected Versions The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots version 1.11.2 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2014-5847: Undefined Security Weakness

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

BlazeDVD Pro Player 7.0 - .plf Local Buffer Overflow (SEH)

BlazeDVD Pro Player 7.0 - .plf Local Buffer Overflow SEH BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, W...

BlazeDVD Pro Player 7.0 - '.plf' Local Buffer Overflow (SEH)

BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, Win 8.1 !/usr/bin/python from struct import pack buffer=...

BlazeDVD Pro 7.0 Buffer Overflow

BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, Win 8.1 !/usr/bin/python from struct import pack buffer=...

BlazeDVD Pro v7.0 - (.plf) Buffer Overflow (SEH) Exploit

BlazeDVD Pro version 7.0 SEH buffer overflow exploit written in python. BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested...

Shunra Network Virtualization for Hewlett-Packard toServerObject() Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Network Visualization. Authentication is not required to exploit this vulnerability. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: The specific flaw exists...

Microsoft IIS WebDAV Write Access Code Execution

No description provided by source. $Id: iiswebdavuploadasp.rb 10397 2010-09-20 15:59:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

IrfanView <= 4.00 .IFF File Buffer Overflow Exploit

No description provided by source. / IrfanView = 4.00 .IFF File Buffer Overflow IrfanView is vulnerable to an unspecified buffer overflow when processing a crafted .IFF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by...

httpdx 1.5 'MKD' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...

Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit

No description provided by source. !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is credited for...

WS-FTP Server 5.03 MKD Overflow

No description provided by source. $Id: wsftpserver503mkd.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)

No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...