CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

Sql injection

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

ACDSee FotoSlate PLP File id Parameter Overflow

Exploit for windows platform in category local exploits $Id: acdseefotoslatestring.rb 13853 2011-10-10 16:47:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

BuzzyWall 1.3.2 - resolute.php Information Disclosure

BuzzyWall 1.3.2 - resolute.php Information Disclosure source: https://www.securityfocus.com/bid/50018/info BuzzScripts BuzzyWall is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local...

Vtiger CRM <= 5.2.1 RCE Vulnerability

Vtiger CRM is prone to a remote code execution RCE vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Perl 5.x - Digest Module Digest-new() Code Injection

Perl 5.x - Digest Module Digest-new Code Injection source: https://www.securityfocus.com/bid/49911/info The Digest module for Perl is prone to a vulnerability that will let attackers inject and execute arbitrary Perl code. Remote attackers can exploit this issue to run arbitrary code in the conte...

Symantec IM Manager Administrator Console Multiple Issues

SUMMARY Symantec IM Manager is vulnerable to Code Injection, Cross-Site Scripting and SQL Injection. Successful exploitation of these vulnerabilities could result in injection/execution of arbitrary code in the context of the browser or the application. AFFECTED PRODUCTS Product | Version |...

eSignal / eSignal Pro 10.6.2425.1208 Buffer Overflow

$Id: esignalstyletemplatebof.rb 13768 2011-09-21 11:55:56Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

This module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol use exploit/windows/scada/sunway/forcecontrolnetdbsrv msf undefinedforcecontrolnetdbsrv show actions ...actions... msf undefinedforcecontrolnetdbsrv set ACTION msf...

Microsoft Internet Explorer layout-grid-char Style Property Use-After-Free Memory Corruption

Added: 09/19/2011 CVE: CVE-2011-1260 BID: 48208 OSVDB: 72950 Background Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem A use-after-free vulnerability exists in Microsoft's Internet Explorer layout engine in mshtml.dll when handling extra-large values f...

Microsoft Internet Explorer layout-grid-char Style Property Use-After-Free Memory Corruption

Added: 09/19/2011 CVE: CVE-2011-1260 BID: 48208 OSVDB: 72950 Background Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem A use-after-free vulnerability exists in Microsoft's Internet Explorer layout engine in mshtml.dll when handling extra-large values f...

Measuresoft ScadaPro 4.0.0 Remote Command Execution

$Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Measuresoft ScadaPro Remote Command Execution

This module allows remote attackers to execute arbitrary commands on the affected system by abusing via Directory Traversal attack when using the 'xf' command execute function. An attacker can execute system from msvcrt.dll to upload a backdoor and gain remote code execution. This vulnerability...

RealNetworks RealPlayer QCP Parsing

Added: 09/12/2011 CVE: CVE-2011-2950 BID: 49172 OSVDB: 74549 Background RealPlayer is a media player application which can play back various multimedia file formats, including QCP audio files. The QCP file format is frequently used to provide ring tones and to record voice for cellular telephones...

CyberLink Power2Go name Attribute (p2g) Stack Buffer Overflow Exploit

This module exploits a stack buffer overflow in CyberLink Power2Go version 8.x The vulnerability is triggered when opening a malformed p2g file containing an overly long string in the 'name' attribute of the file element. This results in overwriting a structured exception handler record. Module...

BisonFTP Server Remote Buffer Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server...

Apple QuickTime 7.6.9 - QuickTimePlayer.dll ActiveX Buffer Overflow

Apple QuickTime 7.6.9 - QuickTimePlayer.dll ActiveX Buffer Overflow source: https://www.securityfocus.com/bid/49465/info Apple QuickTime is prone to a buffer-overflow vulnerability because of a failure to properly bounds-check user-supplied data. Successful exploits will allow attackers to execut...

eSignal and eSignal Pro File Parsing Buffer Overflow in QUO

The software is unable to handle the "" files even those original included in the program like those with the registered extensions QUO, SUM and POR. Successful exploitation of this vulnerability may take up to several seconds due to the use of egghunter. Also, DEP bypass is unlikely due to the...

Microsoft Internet Explorer Time Element Memory Corruption

Added: 09/06/2011 CVE: CVE-2011-1255 BID: 48206 OSVDB: 72947 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. The HTML+Time Timed Interactive Multimedia Extensions helps to add timed, animated, multimedia content to HTML documents. Problem...

WVxWorks FTP server Password Overflow

Exploit for windows platform in category remote exploits $Id: VxWorksFTPserver.rb 16850 2011-09-07 10:20:45Z Iraq $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...