349 matches found
A simple little program vulnerability analysis and exploit-vulnerability warning-the black bar safety net
Body Description: readfile. exe is the vulnerability of the program, it reads the c:\overflow. txt file, and the contents of the file in the dialog form pop up. Analysis process: First step: In overflow. txt text input 1 2 3 4 Using readfile. exe opened, program executed properly. In the text inp...
WMNet2 1.0 6 Kernel Memory File Descriptor Leakage Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5719/info It has been reported that wmnet2 is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of kernel memory. It is allegedly possible for attackers to inherit the open file...
Progea Movicon 11 TCPUploadServer Remote Exploit
No description provided by source. !/usr/bin/python movi.py Progea Movicon TCPUploadServer Remote Exploit Jeremy Brown / jbrown at patchtuesday dot org Mar 2011 TCPUploadServer allows remote users to execute functions on the server without any form of authentication. Impacts include deletion of...
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
No description provided by source. $Id: awingsoftwinds3dsceneurl.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution
No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...
Sudo 1.6.3 Unclean Environment Variable Root Program Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some circumstances, sudo does not...
Novell NetMail <= 3.52d NMAP STOR Buffer Overflow
No description provided by source. $Id: nmapstor.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Halloween Linux 4.0,S.u.S.E. Linux 6.0/6.1/6.2/6.3 kreatecd Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1061/info A vulnerability exists in the kreatecd program for Linux. This program is a graphical front end to the cdrecord program, and is installed setuid root. This program will blindly trust the configuration of the pat...
Winamp stack overflow analysis and use-vulnerability and early warning-the black bar safety net
Winamp is a relatively old player, here is mainly through winamp a poc analysis, to construct a exp. 主 程序 见 附件 winamp.exe poc see Annex poc. m3u. A Poc analysis View the first poc below. Found in addition to the front 1 0 more bytes of the m3u File format to specify the contents, the other parts...
Microsoft Windows Mail HTML Link Program Execution - Ver2 (CVE-2007-1658)
A command and program execution vulnerability has been reported in Microsoft Windows Vista. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands and programs on the affected system...
Directory traversal
The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict SaveToFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the singl...
[SECURITY] Fedora 17 Update: ktimer-4.10.5-1.fc17
KTimer is a little tool to execute programs after some time...
[SECURITY] Fedora 18 Update: ktimer-4.10.5-1.fc18
KTimer is a little tool to execute programs after some time...
[SECURITY] Fedora 18 Update: ktimer-4.10.4-1.fc18
KTimer is a little tool to execute programs after some time...
Vulnerability in "Fujitsu Desktop Update" (for Windows)
Hi @ll, Fujitsu's update utility "Fujitsu Desktop Update" see http://support.ts.fujitsu.com/DeskUpdate/Index.asp, which is factory-preinstalled on every Fujitsu Siemens PC with Windows, has a vulnerability which allows the execution of a rogue program in the security context of the current user...
CVE-2012-6460
Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...
Permanent Reverse TCP Backdoor for IPhone and IPad
Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...
FFFTP < 1.98b Untrusted Search Path Vulnerability - Windows
FFFTP is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UUSee UUPlayer ActiveX控件多个远程代码执行漏洞
Bugtraq ID: 48975 CVE ID：CVE-2011-2589 CVE-2011-2590 UUSee是一款集P2P直播点播于一身的网络电视软件。 UUSee存在两个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当处理"SendLogAction"方法时UUPlayer ActiveX控件存在边界错误，通过提交超长参数可触发基于堆的缓冲区溢出。 -当处理"Play"方法时UUPlayer ActiveX控件存在输入验证错误，向"MPlayerPath"参数传递UNC路径可以应用程序上下文执行任意程序。 UUSee UUPlayer 6.0.0.1 厂商解决方案...
CVE-2011-2963
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service crash via a crafted packet to TCP port 10651...