INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC

No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...

AnyMacro Mail安宁邮件系统存在SQL注入漏洞

简要描述： 给客户做测评发现的.因为需要登录所以定义为中级别. 详细说明： 这是附件的下载选项.由于对mid参数没有做验证,导致出现SQL注入漏洞 漏洞证明： 这是附件的下载选项.由于对midmailid参数没有做验证,导致出现SQL注入漏洞...

CVE-2013-2388

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...

CVE-2013-2388

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...

CVE-2013-2388

CVE-2013-2388 in Oracle E‑Business Suite (Oracle Applications Technology Stack) affects versions 11.5.10.2, 12.0.6, and 12.1.3, with an unspecified vulnerability related to Mid Tier File Management that could impact availability. The connected documents do not provide concrete details on the exac...

PT-2013-3723

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to Mid Tier File Management in the Oracle Applications...

CVE-2013-2388: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management...

DEBIAN-CVE-2012-1584

Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted file header field in a media file, which triggers a large memory allocation...

PT-2012-1137

Name of the Vulnerable Software and Affected Versions TagLib versions prior to 1.7.1 Gentoo Linux affected versions not specified Description The issue concerns multiple vulnerabilities in the TagLib package that can lead to a denial of service, causing disruption to protected information...

CVE-2010-5007

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

PT-2011-1942

Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the mid parameter in the "pages/match...

CVE-2010-5007: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

WordPress Plugin Glossary - SQL Injection

Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary, Wordpress Plugin, vulnerability is SQL...

Microsoft Host Integration Server Installed

Microsoft Host Integration Server HIS is installed on the remote host. HIS provides connectivity between Windows networks and IBM mainframe and mid-range computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56448; scriptversion"1.10";...

SQL-Ledger <= 2.8.33 Post-authentication LFI/Edit Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL-Ledger = 2.8.33 Post-authentication Local File Include/Edit Vulnerability Google Dork: inurl:/sql-ledger/login.pl Date: April 15, 2011 Author: bitform Software Link: http://www.sql-ledger.com/source/sql-ledger-2.8.33.tar.gz...

SQL-Ledger 2.8.33 - (Authenticated) Local File Inclusion / Edit

Exploit Title: SQL-Ledger = 2.8.33 Post-authentication Local File Include/Edit Vulnerability Google Dork: inurl:/sql-ledger/login.pl Date: April 15, 2011 Author: bitform Software Link: http://www.sql-ledger.com/source/sql-ledger-2.8.33.tar.gz Version: 2.8.33 Tested on: Ubuntu Server 10.04 CVE :...

DivX Player v7.0 (.mid) Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : DivX Player v7.0 .mid Buffer Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Overflow in 'DivX...

PT-2011-2401

Name of the Vulnerable Software and Affected Versions Music Animation Machine MIDI Player version 2006aug19 Release 035 and possibly other versions Description The issue allows user-assisted remote attackers to cause a denial of service, potentially crashing the system, and may have other...

CVE-2010-1468: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager aka MVRMM or commvrestaurantmenumanager component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menudisplay action to index.php...