WinMount MOU File Handling Overflow Vulnerability

WinMount MOU File Handling Overflow Vulnerability Vulnerability: WinMount 3.3.0401 Vendor: www.winmount.com 1 Software Description: WinMount is an useful windows utility. It is a compression tool, also a virtual drive tool. It can compress files, decompress/ browse/convert compressed archieves, i...

WinMount MOU 3.3.0401 File Handling Overflow

WinMount MOU File Handling Overflow Vulnerability Vulnerability: WinMount 3.3.0401 Vendor: www.winmount.com 1 Software Description: WinMount is an useful windows utility. It is a compression tool, also a virtual drive tool. It can compress files, decompress/ browse/convert compressed archieves, i...

VUplayer (.wax file) local buffer overflow crash exploit

/ VUplayer .wax file local buffer overflow crash exploit By Assad edin - Moroccan Hackerz Mgharba Until Death - [email protected] Mgharba Bhjawa Msalmine : xCracker - Assad edin - Simo-s0ft . Special Thanks: All Moroccan & Muslims Hackers & Str0ke Ro7 T9Awd CHof li I7wik. / includestdio.h...

IRIX - execve(/bin/sh) Shellcode (43 bytes)

IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 183 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends inclu...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...

linux/mips - Linksys WRT54G/GL port bind shellcode 276 bytes

linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability

ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-015 April 3, 2008 -- CVE ID: CVE-2008-1017 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Sql injection

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

CVE-2008-0789 concerns the LI-Scripts LI-Countdown (countdown.php) SQL injection vulnerability, exploitable via the years parameter. The issue enables remote arbitrary SQL execution with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with no authentication. Impact is reported as Par...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

LI-countdown SQL Injection Vulnerability

--------------------Summary---------------- Vendor: LI-Scripts Vendor's Web Site: http://www.liscripts.net Software: LI-countdown Sowtware's Web Site: http://www.liscripts.net/products.phpcountdown Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched PoC/Exploit: Not...

li-guestbook sql inj

New Advisory: LI-Guestbook SQL Injection Vulnerability http://www.security-news.ws/li-sql-injection/ --------------------Summary---------------- Vendor: LI-Scripts Vendor's Web Site: http://www.liscripts.net Software: LI-Guestbook Sowtware's Web Site: http://www.liscripts.net/products.phpguestboo...

CVE-2007-5244

Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the openmarkerfile function...

Unfixed XSS vulnerability at tipp.sunchon.ac.kr

Security researcher WHK, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting tipp.sunchon.ac.kr, which at the time of submission ranked 2310914 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is current...

CVE-2007-1302

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

Sql injection

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

CVE-2007-1302

CVE-2007-1302 affects LI-Guestbook versions 1.1 and 1.2. The vulnerability is a SQL injection in guestbook.php triggered via the country parameter when magic_quotes_gpc is disabled. Remote attackers could potentially execute arbitrary SQL commands as described across multiple sources, with the no...