8825 matches found
gAlan 0.2.1 - Buffer Overflow Exploit
No description provided by source. $Id: galanfileformatbof.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Microsoft Infotech Storage Library Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17926/info Microsoft Windows is susceptible to a heap-corruption vulnerability while attempting to read specially crafted CHM or ITS files. This occurs in the 'ITSS.DLL' library. This vulnerability allows remote attackers...
Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions properly. A remote attacker may cause ...
CafeEngine CMS 2.3 - SQLI Vulnerability
No description provided by source. ========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Windows OpenType Font - File Format DoS Exploit
No description provided by source. OpenType font file format remote client-side DoS exploit for Windows By Oleksiuk Dmytro aka Cr4sh http://twitter.com/dolex http://blog.cr4.sh mailto:[email protected] INFO: Zero day vulnerability exists in kernel-mode library ATMFD.DLL, that using by OS for worki...
Kubeit CMS Remote SQL Injection Vulnerability
No description provided by source. ============================================= Kubeit CMS Remote SQL Injection Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
ModernBill 4.3 User.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17596/info ModernBill is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allo...
Apple Mac OS X 10.x ImageIO OpenEXR Image File Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17768/info ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files. This issue allows remote users to crash applications that use...
Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31537/info Adobe Flash Player Plugin is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the browser that uses the plugin, denying service to legitimate...
Microsoft Clip Art Gallery 5.0 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1034/info A vulnerability exists within the Microsoft Clip Art Gallery, where a remote user can crash the Clip Art application or possibly execute arbitrary code. Clip art can be downloaded from any website and incorporat...
V3 Chat Instant Messenger - mycontacts.php membername Arbitrary User Buddy List Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...
DBSite wb CMS 'index.php' Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39613/info DBSite wb CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27914/info Sybase MobiLink is prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. A successful exploit will allow remote...
joomla com_jmarket SQLi Vulnerability
No description provided by source. ============================================ joomla comjmarket SQLi Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...
PHP 3/4/5 Multiple Local And Remote Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/11964/info PHP4 and PHP5 are reported prone to multiple local and remote vulnerabilities that may lead to code execution within the context of the vulnerable process. The following specific issues are reported: A heap-bas...
Word Splash Pro <= 9.5 - Buffer Overflow
No description provided by source. Exploit Title: Word Splash Pro = 9.5 Buffer Overflow -EggHunter- Software Link: http://www.chronasoft.com/software/wordsplashpro Version: = 9.5 Tested on: Win XP SP3 French Date: 20/12/2010 Author: h1ch4m Email: [email protected] Home: Net-Effects.blogspot.com Gree...
Mtp-Target 1.2.2 Client Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13460/info A remote format string vulnerability affects Mtp-Target Client. This issue is due to a failure of the application to securely call a formatted printing function. An attacker may leverage this issue to execute...
ECardPro 2.0 Search.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Oracle Outside-In JP2 File Parsing Heap Overflow
No description provided by source. Application: Oracle Outside-In JP2 File Parsing Heap Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-24 Author: Francis Provencher Protek Research Lab's Website...
CCMPlayer 1.5 Stack based Buffer Overflow (.m3u)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...