CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

Sub Station Alpha 4.08 - .rt Local Buffer Overflow (PoC)

Sub Station Alpha 4.08 - .rt Local Buffer Overflow PoC /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header=...

Sub Station Alpha v4.08 .rt file Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Sub Station Alpha v4.08 .rt file Local Buffer Overflow PoC ========================================================== /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0...

Sub Station Alpha 4.08 Buffer Overflow

/Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header= "\x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x30"...

Sub Station Alpha 4.08 - '.rt' Local Buffer Overflow (PoC)

/Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header= "\x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x30"...

Alpha B Forum Cross Site Scripting

============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...

[SECURITY] [DSA-1953-2] New expat packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-2 [email protected] http://www.debian.org/security/ Stefan Fritsch December 31, 2009 http://www.debian.org/security/faq -...

Easy RM to MP3 2.7.3.700 - Local Buffer Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

gAlan 0.2.1 Buffer Overflow 0day Exploit

No description provided by source. !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 "From Static Analysis to 0day Exploit" Originally a SecurityTubeCon Presentation, which I'm guessing was canceled...

Microsoft IIS 4.0 .HTR Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1939-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano November 24, 2009 http://www.debian.org/security/faq -...

New pidgin packages fix arbitrary code execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1932-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 08, 2009...

Mozilla Firefox下载文件名欺骗漏洞

BUGTRAQ ID: 36867 CVE ID: CVE-2009-3376 Firefox是一款流行的开源WEB浏览器。 在下载文件名中包含有从右到左（RTL）覆盖字符的文件时对话框标题栏中所显示的名称可能与对话体所显示的名称不一致。攻击者可以利用这个漏洞迷惑将要下载和打开的文件名和扩展名，诱骗用户打开非预期的恶意文件。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla SeaMonkey 1.1.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1922-1）以及相应补丁:...

[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...

Borland InterBase PWD_db_aliased() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

Joomla Photo Blog SQL Injection

/ Joomla Component comphotoblog SQL injection vulnerability - category Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 12, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://webguerilla.net/ + Download :...

PowerISO 4.0 - Local Buffer Overflow (PoC)

!/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000 EDX 00004000 EBX 00000000 ESP...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/addalbum.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/...

CVE-2009-3173

The Rat CMS Alpha 2 is affected by CVE-2009-3173 due to an unrestricted file upload in admin/add_album.php. An attacker can upload a file with an executable extension to the server, then access it via a direct request to the file under images/, potentially allowing remote code execution. The affe...

The Rat CMS Alpha 2 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= The Rat CMS Alpha 2 Arbitrary File Upload Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...