3943 matches found
M-Player 0.4 Local Denial of Service Vulnerability
Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file=...
M-Player 0.4 - Local Denial of Service
M-Player 0.4 - Local Denial of Service !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my...
M-Player 0.4 Denial Of Service
EDB-ID: 18337 CVE: N/A OSVDB-ID: N/A Author: JaMbA Published: 2012-01-08 Verified: Not Verified Exploit Code: Download Vulnerable App: Download Rating Overall: 1 2 3 4 5 0.0 Prev Home Next !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author:...
M-Player 0.4 - Local Denial of Service
!/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my $junk= "\x41" x 2048; open$FILE,"$file";...
帝国(EmpireCMS)cms 6.6 后台拿shell
简要描述： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字） 详细说明： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字）发现6.6不行，上传之后会变成类似uploadm1324885505nXmTdQamQq.php这样的！ 漏洞证明：...
Sybase M-Business Anywhere两个权限提升漏洞
Sybase 的M-Business Anywhere 可以提供一个移动内容和应用程序平台，将基于Web的移动内容和应用程序传送至移动设备。 Sybase M-Business Anywhere在实现上存在两个未明细节的漏洞，可被恶意用户利用获取提升的权限。 Sybase Sybase M-Business Anywhere 7.x Sybase Sybase M-Business Anywhere 6.x 厂商补丁： Sybase ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sybase.com/...
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE includingTrinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE including Trinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...
PT-2011-1763
Name of the Vulnerable Software and Affected Versions Snitz Forums 2000 version 3.4.07 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the M NAME parameter in the members.asp file. Recommendations For version 3.4.07, consid...
PT-2011-1762
Name of the Vulnerable Software and Affected Versions Snitz Forums 2000 version 3.4.07 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the M NAME parameter in the "members.asp" file. Recommendations For Snitz Forums 2000 version 3.4.07, avoid...
StudioLine Photo Basic 3.70.34.0 Insecure Method
Vulnerability ID: HTB23024 Reference: http://www.htbridge.ch/advisory/studiolinephotobasic3activexcontrolinsecuremethod.html Product: StudioLine Photo Basic 3 Vendor: H&M Software http://studioline.biz Vulnerable Version: 3.70.34.0 and probably prior Tested on: 3.70.34.0 Vendor Notification: 15...
Sybase M-Business Anywhere agSoap.exe Buffer Overflow
A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...
Sybase M-Business Anywhere (AvantGo) Sync Server Detection
The remote service is a Sybase M-Business Anywhere formerly AvantGo Sync Server, which handles synchronization requests from a mobile device and determines whether to obtain requested pages from the source web server or from a shared cache on the Sync Server itself. C Tenable Network Security, In...
Sybase M-Business Anywhere (AvantGo) gsoap Module password Tag Handling Overflow
The Sybase M-Business Anywhere AvantGo software installed on the remote host includes a SOAP server that fails to validate an XML end tag in a SOAP request, resulting in a buffer overflow. An unauthenticated, remote attacker can exploit this to execute arbitrary code. This plugin checks the heap...
Sybase M-Business Anywhere (AvantGo) SOAP Server Detection
The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...
Sybase M-Business Anywhere multiple security vulnerabilities
Buffer overflows during web access authentication TCP/80, TCP/443, buffer overflow on SOAP request processing TCP/8093, TCP/8094...
Sybase M-Business Anywhere agSoap.exe password Tag Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gsoap.exe module exposed by the webserver that listens by default on TC...
Sybase M-Business Anywhere Server agd.exe encodeUsername Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase MBusiness Anywhere. Authentication is not required to exploit this vulnerability. The flaw exists within the agd.exe component which listens by default on TCP port 80 and 443. When calling...
Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within agsync.dll, which listens for SOAP and sync HTTP requests on ports 80 and 4...
