Design/Logic Flaw

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Code injection

S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...

CVE-2008-6702

The CVE-2008-6702 vulnerability affects S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and earlier. The issue is a remote denial-of-service caused by processing a long nickname, which triggers an exception in the affected engine. The available documents do not specify the vulnerable componen...

XBMC 8.10 (takescreenshot) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected...

kernel security update

CentOS Errata and Security Advisory CESA-2009:0326 Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

XBMC 8.10 (Get Request) Remote Buffer Overflow Exploit (win)

Exploit for windows platform in category remote exploits ============================================================ XBMC 8.10 Get Request Remote Buffer Overflow Exploit win ============================================================ !/usr/bin/env python ''' Xbmc get request remote buffer...

XBMC 8.10 GET Overflow

!/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected. Restrictions:Bad chars need to be filtered. This exploit...

XBMC 8.10 (takescreenshot) Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ========================================================= XBMC 8.10 takescreenshot Remote Buffer Overflow Exploit ========================================================= !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer...

XBMC 8.10 - takescreenshot Remote Buffer Overflow

XBMC 8.10 - takescreenshot Remote Buffer Overflow !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affecte...

XBMC 8.10 (Windows) - GET Remote Buffer Overflow

XBMC 8.10 Windows - GET Remote Buffer Overflow !/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected...

XBMC 8.10 (Windows) - GET Remote Buffer Overflow

!/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected. Restrictions:Bad chars need to be filtered. This exploit...

Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join...

Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)

Multiple PDF Readers - JBIG2 Local Buffer Overflow PoC causes an exception at 41414141 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/8090.pdf 2009-41414141.pdf milw0rm.com 2009-02-23...

Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)

causes an exception at 41414141 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8090.pdf 2009-41414141.pdf milw0rm.com 2009-02-23...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Redirect that works in 2.9 is broken in later Confluence versions

Adding a .jsp containing the following code will work in 2.9, but produces an exception in 2.10 when a parameter such as osdestination is supplied: code code Example URL: http://localhost:8080/confluence/login2.jsp?osdestination=%2Fdashboard.action Typical exception: quote...

Novell Netware 6.5 - 'ICEbrowser' Remote System Denial of Service

!/usr/bin/perl novellnwibsysdos.pl Novell Netware 6.5 ICEbrowser Remote System Denial of Service Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com "Mozilla/5.0 NetWare; U; NetWare 6.50.06; en-US ICEbrowser/6.1.2 NovellViewPort/3.7.2" After target views exploit page, the browser wil...

Forgot Password/Crowd Integration exception handling and regex improvements

If JIRA is integrated with Crowd, and Crowd has password restrictions e.g. regex, a user will receive a stack trace in JIRA if the new password does not meet Crowd's password requirements e.g. through the Forgot Password link in JIRA. noformat java.lang.IllegalArgumentException: Could not change...