Electronics Workbench (EWB File) Local Stack Overflow PoC

No description provided by source. !/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...

Electronics Workbench - .ewb Local Stack Overflow (PoC)

Electronics Workbench - .ewb Local Stack Overflow PoC !/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O ...

Electronics Workbench - '.ewb' Local Stack Overflow (PoC)

!/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Design/Logic Flaw

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Directory traversal

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4874

CVE-2008-4874 concerns Philips Electronics VOIP841 DECT Phone firmware 1.0.4.50 and 1.0.4.80, which allegedly contains a back door account named “service” with password “service,” enabling remote access. The incident is documented across multiple sources (NVD/CVE records) and described as a backd...

CVE-2008-4876

The CVE-2008-4876 entry concerns an XSS vulnerability in the web server component of Philips Electronics VOIP841 DECT Phone. Affected firmware versions 1.0.4.50 and 1.0.4.80 allow remote attackers to inject arbitrary web script or HTML via the request URL because it is not properly sanitized in t...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

CVE-2008-4876: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

CVE-2008-4875: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4874: Undefined Security Weakness

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Unfixed XSS vulnerability at www.electronics-lab.com

Security researcher SaMTHG, has submitted on 25/08/2008 a cross-site-scripting XSS vulnerability affecting www.electronics-lab.com, which at the time of submission ranked 42442 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc. -------------- Access Violation at 0x42424242 The code: object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'/object input language=VBScript onclick=Son...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow PoC ==================================================================== Buffer Overflow Vulnerability in...

ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow (PoC)

ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow PoC Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to...

imagestation-overflow.txt

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to ImageStation that is a servicemark of Sony Electronics Inc. Internal name...