{PRL} Cerberus FTP server 3.0.6 Pre-Auth DoS

Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP...

VB 2009: Stefan Tanase on Web 2.0 Threats and Anti-Social Networking

Digital Underground podcast with Dennis Fisher Dennis Fisher talks with Stefan Tanase, senior security researcher at Kaspersky Lab, live from Virus Bulletin 2009 about the threats on social networking sites and the privacy and security concerns presented by Web 2.0 technologies. Here are the slid...

subversion

New subversion packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2411 Here are the details from the Slackware 12.2...

googlesketchup-overflow.txt

/ Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of powerful features and applications...

Google SketchUp Pro 7.0 (.skp file) Remote Stack Overflow PoC

No description provided by source. / Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of...

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow (PoC)

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow PoC / Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchU...

Google SketchUp Pro 7.0 - '.skp' Remote Stack Overflow (PoC)

/ Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of powerful features and applications...

Zortam MP3 Player 1.50 - .m3u Integer Division by Zero

Zortam MP3 Player 1.50 - .m3u Integer Division by Zero !/usr/bin/perl Title: Zortam MP3 Player 1.50 m3u Integer Division by Zero Vulnerability Product Web Page: http://www.zortam.com Tested On: Microsoft Windows XP Professional SP3 English ===--- 1c0.7f8: Integer divide-by-zero - code c0000094...

Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC

No description provided by source. == Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC Product: http://www.assistanttools.com/products/tageditors/musictageditor/index.shtml Tested On Microsoft Windows XP Professional SP3 English Vulnerability Discovered By Gjoko 'LiquidWorm' Krstic...

Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)

Music Tag Editor 1.61 build 212 - Remote Buffer Overflow PoC == Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC Product: http://www.assistanttools.com/products/tageditors/musictageditor/index.shtml Tested On Microsoft Windows XP Professional SP3 English Vulnerability Discovered By Gjok...

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities !/usr/bin/perl Title: Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities Product web page: http://www.zortam.com Desc: Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two...

Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities

Summary Zortam Mp3 Media Studio is all-in-one Mp3 application that contains Mp3 ID3 Tag Organizer for searching and cataloguing Mp3 files into Mp3 library, editing ID3v1 and ID3v2.4 tags ID3 Tag Editor-Mp3 Tag Editor, CD Ripper with album cover art/lyric support that uses CDDB Internet Compact Di...

Zortam MP3 Player 1.50 (m3u) Integer Division by Zero Exploit

Summary Zortam Mp3 Player will enable you to listen all your favorite tracks and at the same time enjoy a show of lights and images visualizing the covers of your albums and song lyrics. Description Zortam Mp3 Player suffers from a division by zero attack when handling .m3u files, resulting in...

Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC

Summary Simple-to-use WMA / MP3 tag editor that allows you to change tagged information about your MP3/WMA music files. Quickly change music filenames, create PLS/M3U playlists and even add lyrics to your music files, with full UNICODE support. Music filenames and tags are never what they should,...

Zortam MP3 Player 1.50 (m3u) Integer Division by Zero Exploit

No description provided by source. !/usr/bin/perl Title: Zortam MP3 Player 1.50 m3u Integer Division by Zero Vulnerability Product Web Page: http://www.zortam.com Tested On: Microsoft Windows XP Professional SP3 English ===--- 1c0.7f8: Integer divide-by-zero - code c0000094 first chance First...

Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)

== Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC Product: http://www.assistanttools.com/products/tageditors/musictageditor/index.shtml Tested On Microsoft Windows XP Professional SP3 English Vulnerability Discovered By Gjoko 'LiquidWorm' Krstic liquidworm gmail com Zero Science Lab -...

Microsoft Office Web Components Active-X Overflow

var shellcode = unescape"evil code"; var array = new Array; var ls = 0x81000-shellcode.length2; var bigblock = unescape"%u0b0c%u0b0C"; whilebigblock.length...

Unfixed XSS vulnerability at www.safety-lab.com

Security researcher Rohit Bansal, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.safety-lab.com, which at the time of submission ranked 1041608 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It i...

ruby

New ruby packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1904 Here are the details from the Slackware 12.2...

AIMP 2.51 build 330 (ID3v1/ID3v2 Tag) Remote Stack Buffer Overflow PoC (SEH)

Summary Freeware audio player. Description AIMP version 2.51 build 330 suffers from a stack based buffer overflow vulnerability that can be exploited via malicious media file that supports ID3 tags mp3. EIP and ECX registers gets overwritten, including the SE handler and the pointer to the next S...