56 matches found
CVE-2014-0656
Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...
CVE-2014-0652
Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...
Design/Logic Flaw
The administrative interface in Cisco Context Directory Agent CDA does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347...
CVE-2014-0652
Cisco Context Directory Agent (CDA) is affected by CVE-2014-0652 in the Mappings page. The vulnerability arises from insufficient validation of user-supplied input in the Mappings page, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary script/HTML (XSS) when a use...
CVE-2014-0651
The administrative interface in Cisco Context Directory Agent CDA does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347...
CVE-2014-0654
The Cisco Context Directory Agent (CDA) is affected by CVE-2014-0654 due to insufficient validation of RADIUS accounting messages. A remote, unauthenticated attacker can replay crafted messages to modify the CDA cache. The vulnerability could affect the contents of the CDA cache; Cisco notes that...
CVE-2014-0656
Cisco Context Directory Agent (CDA) contains a vulnerability where an authenticated remote attacker can hide values entered in affected input fields due to insufficient input validation. This can cause the UI to omit user-entered data. Exploitation requires authentication to a targeted device. Ci...
CVE-2014-0652
Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...
CVE-2014-0651
Cisco Context Directory Agent (CDA) is affected by CVE-2014-0651 due to insufficient authorization enforcement in the administrative interface. An authenticated, remote attacker can hijack an active session to perform administrative actions, effectively gaining privileges. The advisory notes expl...
CVE-2014-0656
Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...
Magic Music Editor Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By:...
Magic Music Editor 8.12.2.11 Buffer Overflow
!/usr/bin/perl +Exploi Title: Exploit Buffer Overflow Magic Music Editor +Date: 03\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.magic-video-software.com/downloadserver/Magic-Music-Editor.exe +POC Found By: AtT4CKxT3rR0r1SThttp://www.exploit-db.com/exploits/16255/ +Version: 8.12.2.11...
Magic Music Editor - '.cda' Denial of Service
!/usr/bin/perl Exploit Title: Magic Music Editor .cda DOS Version : All Version Author : AtT4CKxT3rR0r1ST [email protected] Download : http://www.magic-video-software.com/magicmusiceditor/download.html Sp3C!4L Gr34T$ T0 h1ch4m my $file= "DOS.cda"; my $junk = "\x41" x 80000; open$FILE,"$file"; print $FI...
CVE-2004-1150
Stack-based buffer overflow in the incdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long 1 device name or 2 sound track number, as demonstrated with a .m3u or .pls playlist file...