EDraw Flowchart ActiveX Control 2.3 - 'EDImage.ocx' Remote Denial of Service (IE)

EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE Vendor: EdrawSoft - http://www.edrawsoft.com Platform Used: MS Win XP Pro SP3 en / IE 8.0 CompanyName EDrawSoft FileDescription EDraw Flowchart ActiveX Control Module FileVersion 2, 3, 0, 6 InternalName EDrawSoft LegalCopyright...

[slackware-security] kdebase-workspace

New kdebase-workspace packages are available for Slackware 13.0 and -current to fix a security issue with KDM. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/kdebase-workspace-4.2.4-i486-2slack13.0.txz: Rebuilt. Patched a security issue with KDM. For more information, se...

MultiThreaded HTTP Server v1.1 Directory Traversal

Exploit for multiple platform in category remote exploits ================================================== MultiThreaded HTTP Server v1.1 Directory Traversal ================================================== Exploit Title: MultiThreaded HTTP Server v1.1 Directory Traversal Date: Apr 21, 2010...

AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities

Summary AVTECH Software, a private corporation founded in 1988, is a computer software and hardware manufacturer specializing in providing Windows NT/2K/XP/2K3 products to monitor multi-OS computers and network issues throughout a department or an entire enterprise. Once issues or events occur,...

Multiple vulnerabilities in Zikula Application Framework

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. 1 XSRF CSRF in Zikula Application Framework: CVE-2010-1732 The vulnerability...

Aladdin eToken PKI Client 4.5 - Virtual File Handling Memory Corruption (PoC)

Aladdin eToken PKI Client 4.5 - Virtual File Handling Memory Corruption PoC !/usr/bin/perl -w Title: Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC Summary: The eToken PKI Client is the software that enables eToken USB operation and the implementation of...

Multiple vulnerabilities in AdaptCMS Lite

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/seamonkey-2.0.4-i486-1slack13.0.txz: Upgraded. This release fixes some more security vulnerabilities. For more information,...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.24-i686-1.txz: Upgraded. This upgrade fixes some more security...

{PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services

Application: Lexmark Multiple Laser Printer FTP Remote Denial of Services Platforms: Lexmark Multiple Laser printer Exploitation: Remote Exploitable CVE Number: CVE-2010-0618 Discover Date: 2010-01-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com 1...

{PRL} Lexmark Multiple Laser Printer Remote Stack Overflow

Application: Lexmark Multiple Laser Printer Remote Stack Overflow Platforms: Lexmark Multiple Laser printer Exploitation: Remote Exploitable CVE Number: CVE-2010-0619 Discover Date: 2010-01-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com 1 Introductio...

IE 6.0 - Local Crash Exploit

No description provided by source. Spot the difference: 5QIM 2.0.0.9 IE Crash Exploit 2008-02-25 08:26 object id="xiaonei" classid="clsid:5C56F4A7-71FC-4FFD-A9D7-18FB87A9DFC6" style="display:none;" /object script function crash var buff = ''; fori=0;i=5000;i++ buff+="AAAAAAAAAA"; object =...

Free Real Estate Contact Form 1.09 - Local File Inclusion

Free Real Estate Contact Form 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

BS.Player v2.51 build 1022 Remote Buffer Overflow Vulnerability

Exploit for unknown platform in category remote exploits =============================================================== BS.Player v2.51 build 1022 Remote Buffer Overflow Vulnerability =============================================================== Summary: Ever since the very beginning in the ye...

VLC Media Player 1.0.5 Goldeneye Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ======================================================= VLC Media Player 1.0.5 Goldeneye remote buffer overflow ======================================================= VLC media player 1.0.5 Goldeneye bookmarks Remote Buffer Overflow PoC...

BS.Player v2.51 build 1022 (Media Library) Remote Buffer Overflow Vulnerability

Summary Ever since the very beginning in the year 2000, the BS.Player™ has been one of the world's most popular video players. It is popular for many reasons. One however should be pointed out: BS.Player™ is the first software movie player ever to enable its users to focus on watching the movie...

VLC media player 1.0.5 Goldeneye (bookmarks) Remote Buffer Overflow PoC

Summary VLC media player is a highly portable multimedia player and multimedia framework capable of reading most audio and video formats MPEG-2, MPEG-4, H.264, DivX, MPEG-1, mp3, ogg, aac ... as well as DVDs, Audio CDs VCDs, and various streaming protocols. Description VLC media player is...

ExtCalendar 2.0 Beta 2 (upgrade.php) Remote XSS Vulnerability

Summary ExtCalendar is a powerful multi-user web-based calendar application. Features include Multi-Languages, Themes, Recurrent Events, Categories, Users and Groups management, Environment and General Settings, Template Configuration, Product Updates. Description ExtCalendar is prone to a...

Nero Burning ROM 9 Buffer Overflow

!/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

No description provided by source. !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...