Brazip 9.0 (.zip File) Buffer Overflow Vulnerability (SEH)

No description provided by source. !user/bin/python Brazip 9.0 .zip File BoF Poc SEH Homepage : www.brazip.com.br Version : 9.0 Tested Os : Windows XP SP1/SP3 EN Usage : $ Python Brazip-poc.py AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum :...

WinMount 3.3.401 ZIP File Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39557/info WinMount is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code...

Vallen Zipper 2.30 - (.ZIP) Heap Overflow

No description provided by source. !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warning...

openSUSE Security Update : ark (openSUSE-SU-2012:0322-1)

Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed CVE-2011-2725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-2012-136)

update to version 1.11.1 to fix several security issues : - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class -...

大汉网络JCMS又一上传漏洞可被Getshell（需登陆）

简要描述： 详细说明： 问题出在jcms/setup/oprupload.jsp中 该功能为导入一个更新包... CommonUploadFile upload = null; ifrequest.getMethod.toUpperCase.equals"POST" JcmsUpdaterecordBLF blf = new JcmsUpdaterecordBLF"1"; JcmsUpdateRecordEntity entity = new JcmsUpdateRecordEntity; //解压路径 String strFilePath = strSysPath +...

LOL, Jar File Malware Just Goes Viral Through Facebook Messages

If you came across any suspicious Facebook message with ‘LOL’ text or a fake Image file send by any of your Facebook friend, avoid clicking it. A Trojan horse is currently circulating in wild through the Facebook social network that could steal your Facebook account data and Credentials. Security...

CVE-2013-5660

Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file...

CVE-2013-5660

Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file...

CVE-2013-5660

Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file...

CVE-2013-5660

WinArchiver 3.2 (PowerSoftware) is affected by a SEH-based buffer overflow in crafted ZIP handling, allowing remote code execution. Affected component: the WinArchiver ZIP processing path; root cause: SEH-based overflow leading to arbitrary code execution. Impact: remote attacker could execute co...

Threat Outbreak Alert: Fake Court Hearing Attendance Request Email Messages on August 7, 2015

Medium Alert ID: 33910 First Published: 2014 April 23 20:34 GMT Last Updated: 2015 August 11 14:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to Portuguese language spam email messages that claim to contain a court hearing attendance notice for the recipient...

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

CVE-2013-7338

CVE-2013-7338 affects Python 3.3.x before 3.3.4 RC1. The vulnerability lies in the Zip handling APIs (ZipExtFile.read/readlines, ZipFile.extract/extractall, etc.), where a file size value larger than the actual zip can trigger an infinite loop and CPU denial of service. Impact is DoS; no exploita...

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

PSF-2014-3 zipfile DoS using invalid file size

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

Threat Outbreak Alert: Fake Delivery Rescheduling Notice Email Messages on April 10, 2014

Medium Alert ID: 33744 First Published: 2014 April 10 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a delivery rescheduling notice from UPS for the recipient. The text in the email message attempts to convince th...

WinRAR Filename Spoofing Exploit

This Metasploit module abuses a filename spoofing vulnerability in WinRAR. The vulnerability exists when opening ZIP files. The file names showed in WinRAR when opening a ZIP file come from the central directory, but the file names used to extract and open contents come from the Local File Header...