84 matches found
Nimsoft nimcontroller 7.80 Remote Code Execution Exploit
/ Exploit Title : Sing About Me, I'm Dying Of Thirst Exploit Author : wetw0rk Exploit Version : Public POC CVE : CVE-2020-8012 Vendor Homepage : https://docops.ca.com/ca-unified-infrastructure-management/9-0-2/en Software Version : 7.80 Tested on : Windows 10 Pro x64, Windows Server 2012 R2...
The vulnerability of Mentor’s Nucleus operating system, related to insufficient checking of DHCP packets, allows attackers to compromise the accessibility and integrity of the protected information.
The vulnerability of Mentor’s Nucleus operating system lies in insufficient testing of DHCP packets. Exploiting this vulnerability allows a remote attacker to compromise the accessibility and integrity of the protected information...
Unspecified Vulnerability in Siemens Mentor Nucleus Networking Module
Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for scalability and reliability in systems spanning the range of aerospace, industrial and medical applications. A security vulnerability exists in the Siemens Mentor Nucleus Networking Module. An attack...
Siemens Mentor Nucleus Networking Module
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Mentor Nucleus Networking Module Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to affect the integrity and...
US-CERT Warns of Crypto Bugs in IEEE Standard
Recent academic work focused on weak cryptographic protections in the implementation of the IEEE P1735 standard has been escalated to an alert published Friday by the Department of Homeland Security. DHS’ US-CERT warned the IEEE P1735 standard for encrypting electronic-design intellectual propert...
August 31, 2017 – Morning Cyber Coffee Headlines – “Jack the Ripper” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 31, 2017 - Headlines Carbon Black in the News: VMware advances applicati...
Girls Who Code Weeks 3 and 4: Robots, the Internet and College
The summer is flying by, and we have reached the mid-point of our Girls Who Code Summer Immersion program. Our students are smart, engaged, learning a ton, and seem to be having a lot of fun! Last week was about robotics. The girls wired and programmed Arduino robots to perform a variety of tasks...
TinyBB 1.2 - SQL Injection Vulnerability
No description provided by source. +-------------------------------+ | TinyBB 1.2 SQLi Vulnerability | +-------------------------------+ Vulnerable Web-App : TinyBB 1.2 Vulnerability : SQL Injection. Author : Aodrulez. Email : [email protected] Google-Dork : TinyBB 2011 all rights reserved...
Sienzo Digital Music Mentor DSKernel2.DLL ActiveX Control Stack Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23838/info Sienzo Digital Music Mentor is prone to multiple stack-based buffer-overflow vulnerabilities because the software fails to adequately check boundaries on data supplied to multiple ActiveX control methods. An...
LEADTOOLS Multimedia 15 'Ltmm15.dll' ActiveX Control Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24035/info LEADTOOLS Multimedia is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately check boundaries on data supplied to an ActiveX control method. An attacker can exploit this...
frame-oshop SQL Injection Vulnerability
Exploit for php platform in category web applications product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx...
Frame-Oshop SQL Injection
product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx Rostock" intitle:"frame-oshop" Note: -sessid had to be fre...
Postcard Mentor - Database Disclosure Exploit
Exploit for php platform in category web applications ============================================= Postcard Mentor - Database Disclosure Exploit ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
LeadTools MultiMedia 15 - Ltmm15.dll ActiveX Control Stack Buffer Overflow
LeadTools MultiMedia 15 - Ltmm15.dll ActiveX Control Stack Buffer Overflow source: https://www.securityfocus.com/bid/24035/info LEADTOOLS Multimedia is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately check boundaries on data supplied to an ActiveX...
LeadTools MultiMedia 15 - 'Ltmm15.dll' ActiveX Control Stack Buffer Overflow
source: https://www.securityfocus.com/bid/24035/info LEADTOOLS Multimedia is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately check boundaries on data supplied to an ActiveX control method. An attacker can exploit this issue to execute arbitrary code i...
Sienzo Digital Music Mentor 2.6.0.4 SetEvalExpiryDate EIP Overwrite
No description provided by source. !-- =============================================================================================== Sienzo Digital Music Mentor DMM 2.6.0.4 DSKernel2.dll SetEvalExpiryDate Method Stack Overflow EIP Overwrite Exploit By Parveen Vashishtha...
sienzo-seh.txt
shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" shellcode=shellcode+unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41"...
CVE-2007-2564
Affected software: Sienzo Digital Music Mentor (DMM) 2.6.0.4; ActiveX control DSKernel2.dll. Vulnerability: multiple stack-based buffer overflows in the control, exploited by a long argument to the (1) LockModules or (2) UnlockModule function. Impact: remote code execution potential. Exploitation...
Sienzo Digital Music Mentor 2.6.0.4 - SetEvalExpiryDate EIP Overwrite
Sienzo Digital Music Mentor 2.6.0.4 - SetEvalExpiryDate EIP Overwrite shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...
Sienzo Digital Music Mentor 2.6.0.4 SetEvalExpiryDate SEH Overwrite
No description provided by source. !-- =============================================================================================== Sienzo Digital Music Mentor DMM 2.6.0.4 DSKernel2.dll SetEvalExpiryDate Method Stack Overflow SEH Overwrite Exploit By Parveen Vashishtha...