PT-2014-5331

Name of the Vulnerable Software and Affected Versions K-lite Codec versions 10.4.5 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by using a crafted .jpg file. Recommendations For versions 10.4.5 and earlier, update to a version later...

CVE-2014-3452: Improper Restriction of Operations within the Bounds of a Memory Buffer

Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service crash via a crafted .jpg file...

K-Lite CODEC 10.45 Memory Corruption

Exploit Title: k-lite Codec memory corruption in latest Version 10.45 Date: 2014/05/12 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.k-litecodec.com Software Link:...

CVE-2014-3151: K-Lite Codec Pack AVI buffer overflow

CVE-2014-3151 affects K-Lite Codec Pack (version 9.x and prior). The vulnerability is a memory corruption flaw triggered by processing a malformed AVI file, allowing a remote attacker to execute arbitrary code or cause a crash. The PacketStorm entry corroborates a memory corruption/vector via AVI...

K-Lite CODEC 9.x Memory Corruption

Exploit Title: K-lite codec Version 9.x Memory corruption vulnerability Date: 2014/05/3 Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.codecguide.com Software Link: http://www.oldapps.com/k-litecodecpack.php?oldklitecodec=12328...

PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

PhotoWIFI Lite 1.0 Command Injection / LFI / File Upload

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

CVE-2013-1636

Cross-site scripting XSS vulnerability in open-flash-chart.swf in Open Flash Chart aka Open-Flash Chart, as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews comjnews component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers ...

Cross site scripting

Cross-site scripting XSS vulnerability in open-flash-chart.swf in Open Flash Chart aka Open-Flash Chart, as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews comjnews component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers ...

CVE-2013-1636

Cross-site scripting XSS vulnerability in open-flash-chart.swf in Open Flash Chart aka Open-Flash Chart, as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews comjnews component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers ...

CVE-2013-1636

Removed by vendor...

PT-2014-2484 · Unknown +3 · Open Flash Chart +3

Name of the Vulnerable Software and Affected Versions: Open Flash Chart versions prior to the version used in Pretty Link Lite 1.6.3 Pretty Link Lite plugin versions prior to 1.6.3 JNews com jnews component version 8.0.1 CiviCRM versions 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3 Description: A...

CVE-2013-1636: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in open-flash-chart.swf in Open Flash Chart aka Open-Flash Chart, as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews comjnews component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers ...

GLSA-201401-17 : PCSC-Lite: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-17 PCSC-Lite: Arbitrary code execution PCSC-Lite contains a stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset Handler atrhandler.c. Impact : A physically proximate attacker could execute...

PCSC-Lite: Arbitrary code execution

Background PCSC-Lite is a PC/SC Architecture smartcard middleware library. Description PCSC-Lite contains a stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset Handler atrhandler.c. Impact A physically proximate attacker could execute arbitrary code or cause a Denial o...

AfterLogic Pro and Lite 7.1.1.1 - Persistent Cross-Site Scripting

Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/AfterLogic/Default.aspx Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer...

AfterLogic Pro / Lite 7.1.1.1 Cross Site Scripting

Click Me, Please...\r\n NOTE: javascript html char encode = javaScRipt then you will be able to get into the victim's mailbox via the url: http://WebSite/AfterLogic/Default.aspx Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer...

PT-2014-3851

Name of the Vulnerable Software and Affected Versions NeoFiler application versions 5.4.3 and earlier NeoFiler Free application versions 5.4.3 and earlier NeoFiler Lite application versions 2.4.2 and earlier Description The issue allows attackers to overwrite or create arbitrary files via...