OpenSaveMRU History

Nessus was able to generate a report on files that were opened using the shell dialog box or saved using the shell dialog box. This is the box that appears when you attempt to save a document or open a document in Windows Explorer. C Tenable Network Security, Inc. include"compat.inc"; if...

Wireshark - nettrace_3gpp_32_423_file_open Stack Out-of-Bounds Read

Wireshark - nettrace3gpp32423fileopen Stack Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=694 The following crash due to a stack-based out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file ...

WinAsm Studio 5.1.8.8 - Buffer Overflow Crash (PoC)

WinAsm Studio 5.1.8.8 - Buffer Overflow Crash PoC Exploit: WinAsm Studio 5.1.8.8 BOF. Date: 12/6/2015 Exploit Author: UnN0n Vendor: WinAsm Software Link: http://www.winasm.net/winasm-studio-updates.html Version: 5.1.8.8 Tested on: Windows 7 x6464bit Info Code: rc.right = 0; rc.bottom = 0;...

RHEL 6 : qemu-kvm-rhev (RHSA-2013:0791)

Updated qemu-kvm-rhev packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Bulletproof FTP Client 2010 Buffer Overflow

Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH !/usr/bin/python coding: utf-8 Tested on: Windows XP SP3 EN Version: 2010.75.0.76 Date: 19.08.2014 Author: metacom Credit to previous exploits: + http://www.exploit-db.com/exploits/34162/ by Gabor Seljan +...

Gold MP4 Player 3.3 - Buffer Overflow PoC (SEH)

No description provided by source. ?--------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Dolphin 2.0 (.elf) Local Daniel Of Service

No description provided by source. ?php Dolphin 2.0 .elf Local Daniel Of Service Software Site: http://www.dolphin-emu.com/ Software Download: http://www.dolphin-emu.com/downloads.php?catid=9&downloadid=94 Author: Pr0T3cT10n [email protected] Site: http://www.nullbyte.org.il Dolphin 2.0 is...

DVD-Lab Studio 1.25 DAL File Open Crash

No description provided by source. DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download...

CVE-2013-5054

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

Design/Logic Flaw

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

CVE-2013-5054

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

VulnCheck KEV: CVE-2013-5054

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."...

kernel: fs: filp leak on ro filesystem

A certain Red Hat patch to the dofilpopen function in fs/namei.c in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux RHEL 6 does not properly handle failure to obtain write permissions, which allows local users to cause a denial of service system crash by leveraging acces...

Golden Al-Wafi Translator 1.12 (.waf) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

LibreOffice 3.5.3 .rtf FileOpen Crash

Exploit for windows platform in category dos / poc ?php ------------------------------------------------------------------------------ LibreOffice 3.5.3 - crash when FILEOPEN particular .rtf author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.altervista.org...

Adobe Photoshop CS5.1 U3D.8BI Collada Asset Elements Stack Overflow

No description provided by source. ?php // Adobe Photoshop CS5.1 U3D.8bi Library Collada Asset Elements // Unicode Conversion Stack Based Buffer Overflow poc .dae // 32bit/SEH // // unicode overflow occurs when overlong asset elements are processed // one could be able to return inside an ASCII...

Bitsmith Software Personal Knowbase knowbase.exe FileOpen Dialogue Local Overflow

The version of Bitsmith Personal Knowledge base installed on the remote Windows host is prior to 3.2.4. It is, therefore, affected by a local buffer overflow vulnerability that can be triggered by specifying an oversized string for a specific registry value. This vulnerability may allow for...

Design/Logic Flaw

Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...

PT-2012-2575 · Mozilla +2 · Thunderbird Esr +6

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 4.x through 10.0 Firefox ESR versions 10.x before 10.0.3 Thunderbird versions 5.0 through 10.0 Thunderbird ESR versions 10.x before 10.0.3 SeaMonkey version before 2.8 Description: The issue allows remote attackers to...

Use-after-free in shlwapi.dll — Mozilla

Security researchers Blair Strang and Scott Bell of Security Assessment found that when a parent window spawns and closes a child window that uses the file open dialog, a crash can be induced in shlwapi.dll on 32-bit Windows 7 systems. This crash may be potentially exploitable...