SpecView <= 2.5 build 8 5 3 directory traversal-vulnerability warning-the black bar safety net

Luigi Auriemma Application: SpecView Affected version = 2.5 build 8 5 3 Test platform: Windows Vulnerabilities in the web server directory traversal Author Luigi Auriemma 1Overview 2 Bug 3 The Code 4repair =============== 1Description Description =============== SpecView is an easy to use SCADA...

specview 2.5 build 853 - Directory Traversal

specview 2.5 build 853 - Directory Traversal Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

specview 2.5 build 853 - Directory Traversal

Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

SpecView 2.5 Build 853 Directory Traversal

Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Chrome Engine 4 Denial of Service 0.1

Exploit for windows platform in category dos / poc ---------------- chromerda.c ---------------- / by Luigi Auriemma / include include include include include ifdef WIN32 include include "winerr.h" define close closesocket define sleep Sleep define ONESEC 1000 define waitmsx sleepx else include...

ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-100 June 21, 2012 - -- CVE ID: CVE-2012-0127 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected...

ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-086 June 6, 2012 - -- CVE ID: CVE-2012-0922 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendor...

ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-079 June 6, 2012 - -- CVE ID: CVE-2012-0665 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors...

Samsung NET-i viewer Multiple ActiveX BackupToAvi() Remote Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

RabidHamster R4 Log Entry sprintf() Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Apple Patches Quicktime, Fixes 17 Vulnerabilities

Apple continued its recent parade of patches by releasing an update for Quicktime yesterday, fixing 17 different security vulnerabilities, several which could lead to remote code execution. The update, Quicktime 7.7.2, addresses critical issues in Quicktime for Windows 7, Vista and Windows XP SP2...

FlexNet License Server Manager - Stack Overflow In lmgrd

FlexNet License Server Manager - Stack Overflow In lmgrd Luigi Auriemma Application: FlexNet License Server Manager http://www.flexerasoftware.com/products/flexnet-publisher.htm http://www.globes.com/support/fnputilitiesdownload.htm Versions: = 11.9.1 and others earlier this version number was...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A...

QNX phrelay/phindows/phditto - Multiple Vulnerabilities

Luigi Auriemma Application: QNX phrelay/phindows/phditto http://www.qnx.com http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.phindows/topic/coverpage.html http://www.qnx.com/developers/docs/6.4.1/neutrino/utilities/p/phrelay.html Versions: current Platforms: QNX Neutrino RTOS and Window...

QNX phrelayphindowsphditto - Multiple Vulnerabilities

QNX phrelayphindowsphditto - Multiple Vulnerabilities Luigi Auriemma Application: QNX phrelay/phindows/phditto http://www.qnx.com http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.phindows/topic/coverpage.html http://www.qnx.com/developers/docs/6.4.1/neutrino/utilities/p/phrelay.html...

EMC IRM License Server 4.6.1.1995 - Denial of Service

EMC IRM License Server 4.6.1.1995 - Denial of Service Luigi Auriemma Application: EMC IRM License Server http://www.emc.com Versions: = 4.6.1.1995 Platforms: Windows Bugs: A "version compat check" FIPS NULL pointer B freezing caused by multiple commands C NULL pointer caused by commands after...

EMC IRM License Server 4.6.1.1995 - Denial of Service

Luigi Auriemma Application: EMC IRM License Server http://www.emc.com Versions: = 4.6.1.1995 Platforms: Windows Bugs: A "version compat check" FIPS NULL pointer B freezing caused by multiple commands C NULL pointer caused by commands after invalid version Exploitation: remote Date: 10 Apr 2012...

EMC Data Protection Advisor 5.8.1 - Denial of Service

EMC Data Protection Advisor 5.8.1 - Denial of Service Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A...

FlexNet License Server Manager lmgrd Buffer Overflow

This module exploits a vulnerability in the FlexNet License Server Manager. The vulnerability is due to the insecure usage of memcpy in the lmgrd service when handling network packets, which results in a stack buffer overflow. In order to improve reliability, this module will make lots of...

MS12-020 Microsoft Remote Desktop Use-After-Free DoS

This module exploits the MS12-020 RDP vulnerability originally discovered and reported by Luigi Auriemma. The flaw can be found in the way the T.125 ConnectMCSPDU packet is handled in the maxChannelIDs field, which will result an invalid pointer being used, therefore causing a denial-of-service...