Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC

No description provided by source. / Title: Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 4.1.3.4125 Standalone Summary: KONTAKT 4 PLAYER is the free sample...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability

No description provided by source. Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3...

AnvSoft Any Video Converter 4.3.6 Stack Overflow Exploit

No description provided by source. !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by Vulnerability-Lab...

Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption PoC

No description provided by source. !/usr/bin/perl -w Title: Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC Summary: The eToken PKI Client is the software that enables eToken USB operation and the implementation of eToken PKI-based solutions. These solutions...

XnView RAS Image Processing Heap Overflow

No description provided by source. Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

Novell Groupwise Address Book Remote Code Execution

No description provided by source. Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...

IrfanView RLE Image Decompression Buffer Overflow Vulnerability

No description provided by source. Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...

DVD-Lab Studio 1.25 DAL File Open Crash

No description provided by source. DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download...

cultbooking 2.0.4 - Multiple Vulnerabilities

No description provided by source. CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwit...

MantisBT <= 1.2.3 (db_type) - Cross-Site Scripting & Path Disclosure Vulnerability

No description provided by source. MantisBT =1.2.3 dbtype Cross-Site Scripting & Path Disclosure Vulnerability Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: 1.2.4 Summary: MantisBT is a free popular web-based bugtracking system. It is written in the PHP...

MantisBT <= 1.2.3 (db_type) - Local File Inclusion Vulnerability

No description provided by source. MantisBT =1.2.3 dbtype Local File Inclusion Vulnerability Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: 1.2.4 Summary: MantisBT is a free popular web-based bugtracking system. It is written in the PHP scripting language and...

threedify designer 5.0.2 - Multiple Vulnerabilities

No description provided by source. ========================================= Vulnerability ID: HTB23021 Reference: http://www.htbridge.ch/advisory/threedifydesigneractivexcontrolinsecuremethod.html Product: ThreeDify Designer Vendor: ThreeDify http://www.threedify.com Vulnerable Version: 5.0.2 an...

Adobe Photoshop 12.1 Tiff Parsing Use-After-Free

No description provided by source. Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical detail...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit

No description provided by source. Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX...

Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities

No description provided by source. Title: ------ Adobe Photoshop Elements 8.0 Multiple Arbitrary Code Execution Vulnerabilities Vendor: ------- Adobe Systems Inc. http://www.adobe.com Product web page: ----------------- http://www.adobe.com/products/photoshop-elements.html Affected version:...

Oracle Outside-In LWP File Parsing Stack Based Buffer Overflow

No description provided by source. Application: Oracle Outside-In LWP File Parsing Stack Based Buffer Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-25 Author: Francis Provencher Protek Research...

Novell Groupwise 8.0.2 HP3 and 2012 Integer Overflow Vulnerability

No description provided by source. Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-28 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

XLPD 3.0 - Remote DoS

No description provided by source. Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution

No description provided by source. Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek...

AChecker 1.2 - Multiple Error-Based SQL Injection vulnerabilities

No description provided by source. AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.2 build r530 Summary: AChecker is an open source Web accessibility evaluation tool. It can be use...