Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT - ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC)

; msvcrt.sprintf 03238246 52 push edx 03238247 8D8C24 EC020000 lea ecx,dword ptr ss:esp+2EC 0323824E 68 48612603 push PlayerPT.03266148 ; ASCII "%s" 03238253 51 push ecx 03238254 FFD7 call edi ob...

Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT - ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC)

Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT - ActiveX Control PlayerPT.ocx sprintf Buffer Overflow PoC ; msvcrt.sprintf 03238246 52 push edx 03238247 8D8C24 EC020000 lea ecx,dword ptr ss:esp+2EC 0323824E 68 48612603 push PlayerPT.03266148 ; ASCII "%s" 03238253 51 push ec...

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

PT-2012-3268

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Rising Antivirus version 22.83.00.03 Quick Heal version 11.00 G Data AntiVirus version 21 AVEngine version 20101.3.0.103 in Symantec Endpoint Protection 11 Command Antivirus version 5.2.11.5 Ikarus Virus Utilities T3...

CVE-2012-1459: Undefined Security Weakness

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

Game On: Gamma Ray Scanners To Guard 'Most Technologically Secure' Super Bowl Ever

Gamma ray scanners? Night vision cameras? bomb-proof manhole covers? G-Men? It must be Super Bowl time again, and Marion County, Indiana says that they’ve gone where no other municipality has gone before: a permanent, $18 million regional operation center yes – ROC that will manage security at th...

Google Promises to Protect 'Global Brands' From G+ Squatters

After months as a consumer-only beta, Google finally opened up its Google+ social network to companies this week, launching Google Brand pages. While response to the new brand pages was tepid Robert Scoble penned a rather scathing review, it didn’t take long for folks poking around the new featur...

G-WAN Web server buffer overflow

Buffer overflow on request processing...

Multiple G-WAN vulnerabilities

======================================================================== Title: Multiple G-WAN vulnerabilities Product: G-WAN http://gwan.com/ Author: Fredrik Widlund E-mail: fredrik.widlund at gmail dot com Date: 2011-10-12 ========================================================================...

libpurple: invalid UTF-8 string handling in SILC messages

The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...

G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application or crash the affected application. G-WAN 2.10.6 is...

G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

G-WAN 2.10.6 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application ...

CVE-2011-3688: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

PT-2011-4578

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.3.14.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different parameters: the g parameter to the "Conference/Audio/AudioResourceContainer.asp"...

yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windo...

Belkin G Wireless Router 5.00.12 Password Hash Disclosure

+-----------------------------------------+ | Belkin G Wireless Router Admin Exploit. | +-----------------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter :...

Belkin G Wireless Router F5D7234-4 v5 Exploit

Exploit for hardware platform in category web applications +-----------------------------------------+ | Belkin G Wireless Router Admin Exploit. | +-----------------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author :...

sudo: does not ask for password on GID changes

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command...