Google Chrome Compromise Protected Information

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

CVE-2015-7473

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp...

PT-2016-2298

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.4 Description The issue is related to insufficient access control in the WebSphere MQ message processing service. It allows a local attacker to bypass existing access restrictions by leveraging...

PlayerPro DSP pack - BSD license, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application PlayerPro DSP pack published at the 'play' market has multiple vulnerabilities...

D-Link Cookie command injection

Added: 07/30/2015 Background D-Link produces a variety of routers, switches, and other network equipment for home users and businesses. Problem A command injection vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted cookie in an HTTP request...

Multiple Vulnerabilities in the D-Link DSP-W

The D-Link DSP w110 is an outlet that controls the power switch wirelessly. The D-Link DSP-W has multiple security vulnerabilities that could be exploited by attackers to bypass security restrictions, obtain sensitive information, and arbitrarily upload files...

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...

D-Link DSP-W110 Command Execution / SQL Injection / File Upload Vulnerabilities

D-Link DSP-W110 suffers from command execution, remote file upload, and remote SQL injection vulnerabilities. D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None...

D-Link DSP-W110 Command Execution / SQL Injection / File Upload

D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None allocated. ---- Platforms / Firmware confirmed affected: ---- D-Link DSP-W110 Rev A - v1.05b01 ---- Notes: ----...

UBUNTU-CVE-2014-3174

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service read of...

D-Link info.cgi POST Request Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpClient include...

D-Link HNAP Request Remote Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpClient include...

D-Link HNAP - Request Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link HNAP Request Remote Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerability...

D-Link Devices - 'info.cgi' POST Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link info.cgi POST Request Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerabili...

D-Link DSP-W215 (info.cgi) POST Request Buffer Overflow Exploit

This Metasploit module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is an stack based buffer overflow in the mycgi.cgi component, when handling specially crafted POST HTTP requests addresses to the /common/info.cgi handler. This Metasplo...

D-Link HNAP Request Remote Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link HNAP Request Remote Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerability...

D-Link info.cgi POST Request Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link info.cgi POST Request Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerabili...

SHOUTcast DNAS 2.2.1 - Stored XSS

No description provided by source. There is an XSS\HTML Injection in a song history in song history, allowing inject a JavaScript script or HTML code in site. PoC: 1. Open yours MP3 file setting, and open details overlap. 2. In the title field enter your HTML code 3. Start streaming your MP3 file...

SHOUTcast DNAS 2.2.1 - Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history other version may be also affected Date: 2014-06-11 Exploit Author: robercik101 Vendor Homepage: http://www.shoutcast.com/ ?t=373139 Software Link:...

CVE-2014-3936

Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...