1420 matches found
Adobe Shockwave Director tSAC - Chunk Memory Corruption
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Adobe Shockwave Director tSAC Chunk memory corruption Version : dirapi.dll 11.5.7 Analysis : http://www.abysssec.com Vendor...
Western Digital Arkeia Remote Code Execution (msf module)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ Exploit-DB Note: a...
Wietse Venema Rpcbind Replacement 2.1 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1893/info A remote root vulnerability exists in certain versions of rpcbind portmapper. RPC Remote Procedure Call allows a program to request a service from a program located in another computer in a network without...
Open and Compact FTPd Pre-Authentication Crash (PoC)
No description provided by source. Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to dookie2000ca Date Found: 07/02/2010 Software link: https://sourceforge.net/projects/open-ftpd/ Tested on: Windows XP SP2/SP3 Professional Nod to the Exploit-DB Team It's...
Xunlei XPPlayer <= 5.9.14.1246 ActiveX Remote Exec 0day PoC
No description provided by source. Author: superli Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan Playerhttp://dl.xunlei.com/xmp.html. I exposed this vunl...
Sendmail 8.11/8.12 Debugger Arbitrary Code Execution Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments...
Linux Kernel < 2.6.19 - udp_sendmsg Local Root Exploit (x86/x64)
No description provided by source. / second verse, same as the first CVE-2009-2698 udpsendmsg, x86/x64 Cheers to Julien/Tavis for the bug, p0c73n1 for just throwing code at NULL and finding it executed This exploit is a bit more nuanced and thoughtful ; use ./therebel.sh for everything At this...
SDL_image 1.2.6 Invalid GIF File LWZ Minimum Code Size Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attacker...
Adobe Acrobat and Reader - "pushstring" Memory Corruption
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub12-adobe-acrobat-and-reader-pushstring-memory-corruption/...
netKar PRO 1.1 - '.nkuser' File Creation NULL Pointer Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39558/info netKar PRO is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which wil...
Microsoft Excel - HFPicture Record Parsing Memory Corruption (0day)
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 23 0day binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Memory Corruption 0day Version : Excel 2002 SP3 Analysis :...
Winds3D Viewer 3 'GetURL()' Arbitrary File Download Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35595/info Winds3D Viewer is prone to a vulnerability that can allow malicious files to be downloaded an executed within the context of the affected browser that uses the plugin. Successfully exploiting this issue will...
Gene6 G6 FTP Server 2.0 - Buffer Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/805/info The G6 FTP Server, by Gene6, is vulnerable to a buffer overflow attack. If 2000 characters are sent as the username or password, the software will use up all available memory and CPU time and bring the host to a...
Joomla Component com_television SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comtelevision SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-29 InformatioN Title : Joomla Component comtelevision SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...
Linux Kernel 2.6.x - Ext4 'move extents' ioctl Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions. Exploits may allow attackers to execute arbitrary code with kernel-level privileges a...
Audio Workstation 6.4.2.4.3 pls Buffer Overflow
No description provided by source. $Id: audiowkstnpls.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Joomla Component com_menu SQL Injection Vulnerability
No description provided by source. Title : Joomla Component commenu SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-02 InformatioN Title : Joomla Component commenu SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected]...
Duhok Forum 1.0 script Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : Duhok Forum 1.0 script Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com $ | Dork : duhokFrm 1.0 $ |...
IrfanView TIFF Image Processing Buffer Overflow Vulnerability
No description provided by source. Application: IrfanView TIFF Image Processing Buffer Overflow Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47065 PRL: 2011-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...
Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln.
No description provided by source. !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 2011 Test...