CableTEL's Triple Play v1.0 (login.php) Remote Login Bypass SQL Injection Vuln

Summary Triple Play is a PHP script that CableTEL offers its clients to check their internet traffic status. Description Triple Play suffers from a security bypass vulnerability login.php with sql injection attack. The login page can be accessed only by CableTEL's users. The script fails to...

Microsoft Plug and Play Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Pl...

Ease Audio Cutter 1.20 (.wav file) Local Crash PoC

No description provided by source. !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play...

Ease Audio Cutter 1.20 (.wav file) Local Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Ease Audio Cutter 1.20 .wav file Local Crash PoC ================================================== !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage :...

Ease Audio Cutter 1.20 - '.wav' Local Crash (PoC)

!/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage : http://mp3-cutter.com Application Download : http://mp3-cutter.com/download/audiocutter.exe Description : Click Select file button, select our file and click Play $crash = "\x42" x 15000; my $file =...

Sql injection

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI...

CVE-2008-5629

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

CVE-2008-5629

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action...

pidgin: unrestricted download of arbitrary files triggered via UPnP

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...

Turnkey Arcade Script (id) Remote SQL Injection Vulnerability

No description provided by source. ----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

Unfixed XSS vulnerability at www.playbytherules.net.au

Security researcher xylitol, has submitted on 10/11/2008 a cross-site-scripting XSS vulnerability affecting www.playbytherules.net.au, which at the time of submission ranked 3585026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2008. It...

MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

DEBIAN-CVE-2008-2957

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...

Flash Player cross domain HTTP header flaw

Interaction error between Adobe Flash and multiple Universal Plug and Play UPnP services allow remote attackers to perform Cross-Site Request Forgery CSRF style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primar...

Unfixed XSS vulnerability at www.play-publishing.com

Security researcher mygotmanoel, has submitted on 21/01/2008 a cross-site-scripting XSS vulnerability affecting www.play-publishing.com, which at the time of submission ranked 564296 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/03/2008. I...

Debian: Security Advisory (DSA-322)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via 1 a malformed Transport header, which triggers misparsing in parsetransportheader in RTSPsetup.c, as demonstrated by a Transport header that contains only a...

MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047)

No description provided by source. include stdio.h include windows.h pragma commentlib, "mpr" pragma commentlib, "Rpcrt4" unsigned char szBindString = 0x05,0x00,0x0b,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x01,0x00,0x00,0x00,...

DVD X Player 4.1 Professional - .PLF File Buffer Overflow

DVD X Player 4.1 Professional - .PLF File Buffer Overflow !/usr/bin/env ruby 0day DVD X Player 4.1 Professional .PLF file buffer over flow found by n00b and poc by n00b. First of all DVD x is prone to a buffer-overflow when playing an overly long file name inside A .plf file Which is InterVideo...

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

!/usr/bin/env ruby 0day DVD X Player 4.1 Professional .PLF file buffer over flow found by n00b and poc by n00b. First of all DVD x is prone to a buffer-overflow when playing an overly long file name inside A .plf file Which is InterVideo WinDVD Play list File but also Dvd x uses this file as a pl...