RM Downloader 3.1.3.2.2010.06.13 Buffer Overflow

Exploit Title: RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow SEH Date: 2020-04-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/9af366e59468eac0b92212912b5c3bcb-RMDownloader.exe Version: 3.1.3.2.2010.06.13 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the...

RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow (SEH)

Exploit Title: RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow SEH Date: 2020-04-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/9af366e59468eac0b92212912b5c3bcb-RMDownloader.exe Version: 3.1.3.2.2010.06.13 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the...

Easy RM to MP3 Converter 2.7.3.700 - (Input) Local Buffer Overflow (SEH) Exploit

Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.exe Version: 2.7.3.700 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the python...

Easy RM to MP3 Converter 2.7.3.700 - Input Local Buffer Overflow (SEH)

Easy RM to MP3 Converter 2.7.3.700 - Input Local Buffer Overflow SEH Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Date: 2020-03-26 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.e...

Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)

Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow SEH Date: 2020-03-26 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.exe Version: 2.7.3.700 Tested on: Windows 7 x86 Proof of Concept: 1.-...

CVE-2020-8436

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

PT-2020-20135

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 Description An issue was discovered in the RegistrationMagic plugin for WordPress, where there is SQL injection via the rm analytics show form rm form id parameter. Recommendations For RegistrationMagic...

PT-2020-20136

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 for WordPress Description A cross-site scripting issue was found in the RegistrationMagic plugin for WordPress. The issue can be exploited via the rm form id, rm tr, or form name parameter...

PT-2020-20672

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to export submitted form data and settings. This is achieved through the export function in the RegistrationMagi...

PT-2020-20671

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to import custom vulnerable forms and change form settings via the class rm form settings controller.php file,...

PT-2020-20670

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to elevate their privileges to administrator. This is achieved through the user controller in the class rm user...

OS Command Injection

compile-sass is vulnerable to OS command injection. Lack of validation and sanitization allows an attacker to inject and execute arbitrary OS commands within the rm command in the function setupCleanupOnExitcssPath in dist/index.js...

PT-2020-9150

Name of the Vulnerable Software and Affected Versions compile-sass versions prior to 1.0.5 Description The issue allows execution of arbitrary commands. The function setupCleanupOnExitcssPath within dist/index.js is executed as part of the rm command without any sanitization. Recommendations For...

Command Injection

Overview compile-sass is a module to compile SASS on-the-fly and/or save it to CSS files. Affected versions of this package are vulnerable to Command Injection. The function setupCleanupOnExitcssPath within dist/index.js is executed as part of the rm command without any sanitization. PoC by JHU...

CVE-2013-3489

Buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file...

PT-2020-7441

Name of the Vulnerable Software and Affected Versions: Media Player Classic - Home Cinema MPC-HC versions prior to 1.7.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file. This is a result of a buffer overflow in the software. Recommendation...

CVE-2013-3489: Buffer Copy without Checking Size of Input

Buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file...

CVE-2019-15855

An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service...

CVE-2019-15854

An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a crafted PUT request to an unauthorized resource...

CVE-2019-15854

An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a crafted PUT request to an unauthorized resource...