PT-2017-17621

Name of the Vulnerable Software and Affected Versions Potrace version 1.14 Description The issue is related to the bm readbody bmp function in bitmap io.c, which allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, or possibly hav...

PT-2017-9742

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

PT-2017-9734

Name of the Vulnerable Software and Affected Versions potrace version 1.13 Description The issue is related to the bm new function in bitmap.h, which can be exploited by remote attackers through a crafted image. This exploitation triggers a memory allocation failure, potentially leading to...

PT-2017-9743

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

PT-2017-9745

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a crafted BMP image. This is due to a problem in the bm new function in bitmap.h...

PT-2017-9744

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

BM Classifieds <= 20080409 Multiple SQL Injection Vulnerabilities

No description provided by source. ....... ...... ..... .....CoRPITX ..... ..... ...... ....... Turkey www.Hayalet-hack.com www.zone-turk.net/ Powered by BM Classifieds listingid,adSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net Dork 1 :...

DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up

A few weeks ago, we have announced remote preauth root access exploit for Cisco Linksys http://www.youtube.com/watch?v=cv-MbL7KFKE. Vulnerability details were disclosed here: http://www.defensecode.com/public/DefenseCodeBroadcomSecurityAdvisory.pdf During further research, we have discovered that...

Stack overflow

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message...

CVE-2011-1735

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message...

CVE-2011-1735: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message...

PT-2011-3335

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This allows remote attackers to execute arbitrary code ...

HP Data Protector Backup Client Service bm Message Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on T...

BM Classifieds Ads SQL Injection

ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! BM Classifieds ads SQL injection vulnerability ! Author : Dr.0rYX & Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classifieds + Demo :...

BM Classifieds Ads SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== BM Classifieds Ads SQL Injection Vulnerability ============================================== / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classifieds +...

BM Classifieds Ads - SQL Injection

BM Classifieds Ads - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! BM Classifieds ads SQL injection vulnerability ! Author : Dr.0rYX & Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classified...

BM Classifieds Ads - SQL Injection

ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! BM Classifieds ads SQL injection vulnerability ! Author : Dr.0rYX & Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classifieds + Demo :...

bmclassifieds-sql.txt

....... ...... ..... .....CoRPITX ..... ..... ...... ....... Turkey www.Hayalet-hack.com www.zone-turk.net/ Powered by BM Classifieds listingid,adSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net Dork 1 : ''showad.php?listingid='' Dork 2 :...

Sql injection

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to showad.php and the 2 ad parameter to pfriendly.php...

CVE-2008-1272

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to showad.php and the 2 ad parameter to pfriendly.php...