CDex Genre 1.79 Stack Buffer Overflow

''' Exploit Title: CDex Genre Stack Buffer Overflow Date: 10/9/2015 Exploit Author: UnN0n Software Link: http://cdex.mu/download Version: 1.79 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- Generate a File by python code mentioned below. 2- Goto...

精讯cms sql注入 和 任意刷钱和积分漏洞

简要描述： 精讯cms sql注入 和 任意刷钱和积分漏洞 详细说明： public function reg if $this - obj - isLogin $go = $this - referer && !strstr$this - referer, 'login'?$this - referer:Url :: getUrl'member'; $this - showMsgL'ALREADYISMEMBER', $go; if $this - isSubmit if $this - obj - reg $this - obj - login$POST'info''username...

[SECURITY] Fedora 21 Update: hivex-1.3.11-4.fc21

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual...

[SECURITY] Fedora 20 Update: hivex-1.3.8-4.fc20

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual...

XMB Forum 1.6 Magic Lantern Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submittin...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow PoC

No description provided by source. WftpdExpProHeapPoC.py Discovered by r4x Kamil Szczerba [email protected] Soft : WFTPD Explorer Pro 1.0 Vendor : Texas Imperial Software Vuln : Heap Overwlow Res: LIST Exploit : PoC Reg Overwrite Reg: EAX = 41414141 ECX = 41414141 EDX = 00a57b38 ASCII AAAA... ESI =...

IP Reg <= 0.4 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. IP Reg = 0.4 Multiple Remote SQL Injection Vulnerabilities url: http://sourceforge.net/projects/ipreg/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use i...

Sofi WebGui <= 0.6.3 PRE (mod_dir) Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Sofi WebGui = 0.6.3 PRE Remote File Inclusion Vulnerability Script site:...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

UBUNTU-CVE-2013-5634

arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service NULL pointer dereference, OOPS, and host OS crash or possibly have unspecified other impact by omitting vCPU initialization before a KVMGETREGLIST ioctl call...

PT-2013-5702 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.10 Description: The issue affects the Linux kernel on the ARM platform when KVM is used, allowing host OS users to cause a denial of service, including a NULL pointer dereference, OOPS, and host OS crash, or...

PT-2013-1846

Name of the Vulnerable Software and Affected Versions Elite Bulletin Board versions prior to 2.1.22 Description The issue concerns SQL injection vulnerabilities in the update whosonline reg and update whosonline guest functions. These vulnerabilities allow remote attackers to execute arbitrary SQ...

PT-2012-3911

Name of the Vulnerable Software and Affected Versions SkinCrafter version 3.0 Description A buffer overflow issue exists in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3 vs2005.dll, allowing remote attackers to execute arbitrary code via a long string in the first...

CVE-2012-1797

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

Buffer overflow

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0591

CVE-2010-0591 affects Cisco Unified Communications Manager (CUCM) where a malformed SIP REG message can cause a DoS (process failure) due to an overflow of the Telephone-URL field. Affected CUCM versions include 6.x prior to 6.1(5), 7.x prior to 7.1(3b)SU2, and 8.x prior to 8.0(1). Cisco fixed th...

CVE-2010-0591: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...