CVE-2010-3043

The CVE-2010-3043 entry concerns Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with the root cause described as multiple buffer overflows in atas32.dll. Impacts stated are remo...

CVE-2010-3044

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

CVE-2010-3044

CVE-2010-3044: Multiple buffer-overflow vulnerabilities in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with exploitation via crafted .wrf or .arf files, related to atas32.dll...

Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX email protected Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam...

Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

CERT Issues Advisory On RealPlayer Holes

US CERT has issued an advisory following the release, late last week, of a critical patch from RealNetworks for seven vulnerabilities in its common RealPlayer software. CERT recommended users and administrators to review the advisory from Realnetworks to determine which RealPlayer products were...

UFO: Alien Invasion 2.2.1 - Arbitrary Code Execution

Remote Arbitrary Code Execution Vulnerability in UFO: Alien Invasion -------------------------------------------------------------------- June 18th, 2010 ======= Summary ======= Name: Remote Arbitrary Code Execution Vulnerability in UFO: Alien Invasion Release Date: June 18th, 2010 Discoverer:...

Cisco Digital Media Players unauthorized access

It's possible to inject video/audio data into remote display...

Multiple Media Players ((iTunes / QuickTime) - HTTP DataHandler Overflow

ScaryMovie Exploit Study By: DrIDE October, 2009 There is a widespread failure in the way that .MOV files are handled by the Quicktime Library. I have attempted to compound my findings on this issue. Nearly every .MOV enabled application that I tested fell victim to this exploit. This is a local...

Kantaris 0.5.6 local Denial of service Poc

Exploit for unknown platform in category dos / poc ========================================== Kantaris 0.5.6 local Denial of service Poc ========================================== !/usr/bin/perl Kantaris 0.5.6 local Denial of service Poc How i find this bug: I was looking for mkv player because i...

RealNetworks RealPlayer SMIL File Handling Buffer Overflow (CVE-2005-0455)

The Synchronized Multimedia Integration Language SMIL is a W3C standard based on XML. SMIL is the standard markup language for timing and controlling streaming media clips for media players. A stack buffer overflow vulnerability exists in RealNetworks RealPlayer and RealOne Player. The flaw exist...

Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30

Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 ------------------------------------------------------------- October 21st, 2009 ======= Summary ======= Name: Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 Release Date: October 21st, 2009 Discoverer: Jason Geffner...

PEamp 1.02b Buffer Overflow

PEamp 1.02b .M3U File Local Stack Overflow POC Download: http://files.brothersoft.com/mp3audio/players/mp3player.zip my $chars= "A" x 5000; my $file="dz.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; print "$file has been created \n"; usage: amp.exe=...

MDVA-2009:020 : rhythmbox

Rhythmbox could crash when handling removable devices and media players, like ipods. This update fixes the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. Th...

VS PANEL 7.3.6 (Cat_ID) Remote SQL Injection Vulnerability

No description provided by source. +-------------------------------------+ + Homepage: http://www.vspanel.gr/ + Product: VS PANEL v.7.3.6 + File: showcat.php + Parameter: CatID + Dork: "Powered by VS PANEL" +-------------------------------------+ + SQL Injection: +...

Can social networks foster security?

It’s a departure from the stance that most people are taking these days when it comes to issues of social networking and security, but some industry players are pitching the idea eweek.com that the ever-more-popular communications applications could someday replace more traditional messaging...

Fedora Update for flac FEDORA-2007-730

Check for the Version of flac OpenVAS Vulnerability Test Fedora Update for flac FEDORA-2007-730 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

VUPlayer <= 2.49 .PLS Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= VUPlayer = 2.49 .PLS Universal Buffer Overflow Exploit ======================================================= !/usr/bin/perl VUPlayer = 2.49 .PLS Universal Buffer Overflow Exploit...

VUPlayer 2.49 - .pls Universal Buffer Overflow

VUPlayer 2.49 - .pls Universal Buffer Overflow !/usr/bin/perl VUPlayer = 2.49 .PLS Universal Buffer Overflow Exploit ------------------------------------------------------- Discovered & Exploit by SkD skdrat at hotmail.com & skd at abysssec.com...

ultrastats-blindsql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very flexable log analyzing tool for Call of...