J. River Media Jukebox 12 - '.mp3' Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

This host is installed with South River Technologies WebDrive and is prone to Local Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbsouthriverwebdrivelocprivescvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ South River Technologies WebDrive Local Privilege Escalation...

WebDrive缺少安全描述符本地权限提升漏洞

BUGTRAQ ID: 37955 CVE ID: CVE-2009-4606 WebDrive是Windows化的文件传输软件，可将FTP服务器设置为硬盘盘符。 WebDrive所安装的WebDrive服务没有设置安全描述符，本地用户可以通过stop命令终止服务、使用config命令修改binPath变量并执行任意命令，或通过start命令重启服务。 South River Technologies WebDrive 9.02 厂商补丁： South River Technologies ------------------------...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

South River Technologies WebDrive is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

South River WebDrive Version Detection

This script detects the installed South River WebDrive. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

South River WebDrive Version Detection

This script detects the installed South River WebDrive and saves the version in KB. OpenVAS Vulnerability Test $Id: gbsouthriverwebdrivedetect.nasl 5372 2017-02-20 16:26:11Z cfi $ South River WebDrive Version Detection Authors: Veerendra G Copyright: Copyright c 2010 Greenbone Networks GmbH,...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

South River Technologies WebDrive Service Bad Security Descriptor Local

Exploit for unknown platform in category local exploits ============================================================================================ South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation...

CVE-2009-4606

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...

CVE-2009-4606

South River Technologies WebDrive 9.02 build 2232 is vulnerable to a local privilege escalation due to the WebDrive Service being installed without a security descriptor. An attacker with local access can stop the service, modify the binPath via config to execute arbitrary commands as SYSTEM, or ...

CVE-2009-4606

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...

South River Technologies Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...

South River Technologies WebDrive privilege escalation

Weak service permissions...

South River Technologies WebDrive Service privilege escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...

South River Technologies WebDrive Service privilege escalation

Exploit for unknown platform in category local exploits ============================================================== South River Technologies WebDrive Service privilege escalation ============================================================== Title: South River Technologies WebDrive Service...

Challenge Jiang democratic action Defense,simulation click on the hidden uninstall anti-virus-vulnerability warning-the black bar safety net

Blue glow We know the river people of the self-protection ability is very strong. Self defense is excellent The river people in recovery. SSDT-HOOK later, still able to intercept the image hijacking Oh Body:with a 3 6 0 do example, shell "C:\Program Files\360safe\uninst.exe" 3 6 0 path, you can i...

Unfixed XSS vulnerability at www.redrivergolf.com

Security researcher JustPoDCasT, has submitted on 20/04/2009 a cross-site-scripting XSS vulnerability affecting www.redrivergolf.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/06/2009. It is...

Sql injection

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...