BigAnt Server 2.50 SP1 (ZIP File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== BigAnt Server 2.50 SP1 ZIP File Local Buffer Overflow PoC =========================================================== !/usr/bin/env python BigAnt Server 2.50 SP1 Local Buffer Overflow Po...

BigAnt Server 2.50 SP1 (ZIP File) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python BigAnt Server 2.50 SP1 Local Buffer Overflow PoC Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Update, Browse to zip, Boom. buff = "\x41" 10000 f1 = open"BigAntUpdate.zip","w" f1.writebuff f1.close sebug.net...

Cosminexus Processing Kit for XML and Hitachi Developer's Kit for Java Possible Unauthorized Access through Zip File Scanning Utility

Overview Cosminexus Processing Kit for XML and Hitachi Developer's Kit for Java have a vulnerability that allows unauthorized access through a zip file scanning API. Impact Unauthorized access may be done when loading and scanning an external zip file. Solution Please refer to the 'Vendor...

CVE-2009-2261

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | pipe characters and a command...

Fake Twitter Invites Spread Worm

From MediaPost Laurie Sullivan A wave of fake Twitter email invitations sent in hopes of luring people to unzip a file to find out who invited them has been hitting unsuspecting victims. The message carries a mass-mailing worm. It looks around on infected computers and sends emails to addresses i...

Discuz! admindatabase.inc.php get-webshell bug-vulnerability warning-the black bar safety net

author: ring04h team:http://www. 80vul. com The vulnerability by ring04h discovery and delivery,thx Due to Discuz! Admin\database. inc. php in action=importzip extracting zip files,cause you can get a webshell. An analysis In file admin\database. inc. php in the code: ..... elseif$operation ==...

PeaZIP <= 2.6.1 Compressed Filename Command Injection Exploit

No description provided by source. ?php / PeaZIP = 2.6.1 commpressed filename command injection poc exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://peazip.sourceforge.net/ tested against: peazip 2.5.1, 2.6.1 for Windows a pipe vulnerabilit...

AVG AntiVirus Engine Malware Detection Bypass Vulnerability - Linux

AVG AntiVirus Server Edition for Linux is prone to a malware detection bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

F-Secure Products ZIP/RAR File Scan Evasion (FSC-2009-1)

The remote host has an antivirus product from F-Secure installed. The installed version of the product fails to accurately scan certain ZIP and RAR archive files. Therefore, it may be possible for such files to evade detection from the scanning engine. C Tenable Network Security, Inc...

JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

PHP DoS Vulnerability (Apr 2009)

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Input validation

The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...

CVE-2009-1272

The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...

CVE-2009-1272

The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...

CVE-2009-1272

The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...

Stack overflow

Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product...

CVE-2009-1057

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this...

CVE-2009-1058

Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for...

CVE-2009-1059

PowerZip <= 7.20 (PowerZip/Trident PowerZip 7.2 as cited) is affected by a stack-based buffer overflow in ZIP handling that could allow remote code execution. The CVE describes a remote-code-vulnerability via a crafted .zip file; exploitation details are not fully investigated in the note. Aff...