Unrestricted file upload

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory...

Directory traversal

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTPREFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request ...

CVE-2012-1011

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTPREFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request ...

Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

CVE-2011-2725

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. dot dot sequences in a zip file...

kdeutils4 -- Directory traversal vulnerability

Tim Brown from Nth Dimention reports: I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of th...

Real Networks Netzip Classic 7.5.1 86 - File Parsing Buffer Overflow (Metasploit)

$Id: realnetworksnetzipbof.rb 13952 2011-10-16 15:47:04Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability

This module exploits a stack-based buffer overflow vulnerability in the latest version 3.5 of TugZip archiving utility. In order to trigger the vulnerability, an attacker must convince someone to load a specially crafted zip file with TugZip by double click or file open. By doing so, an attacker...

ScadaTEC ModbusTagServer ScadaPhone - .zip Local Buffer Overflow

ScadaTEC ModbusTagServer ScadaPhone - .zip Local Buffer Overflow mrme@neptune scadatec$ php zip.php -t modbustagserver mrme@neptune scadatec$ nc -v 192.168.114.141 4444 Connection to 192.168.114.141 4444 port tcp/krb524 succeeded! Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001...

ScadaTEC ScadaPhone Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 5.3.11.1230 of scadaTEC's ScadaPhone. In order for the command to be executed, an attacker must convince someone to load a specially crafted project zip file with ScadaPhone. By doing so, an attacker can execute arbitrary...

ScadaTEC ModbusTagServer & ScadaPhone (.zip) Buffer Overflow (0day)

Exploit for windows platform in category local exploits email protected scadatec$ php zip.php -t modbustagserver email protected scadatec$ nc -v 192.168.114.141 4444 Connection to 192.168.114.141 4444 port tcp/krb524 succeeded! Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft...

ZipX For Windows 1.71 Buffer Overflow

!/usr/bin/perl +Exploit Title: ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit +Date: 05\09\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipX/3000-22504-10518937.html +Version: v1.71 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Reproduce: Open the zip file,...

ZipItFast 3.0 - .zip Heap Overflow

ZipItFast 3.0 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: ZipItFast v3.0 .ZIP File Heap Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipItFast---Zip-It-Free-Vprogram22803.html +Version: v3.0 +Tested On: WIN-XP SP3 Brazilian Portugue...

ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3...

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow !/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3...

1ClickUnzip 3.00 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; u...

1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-...