Unfixed XSS vulnerability at s2.gladiatus.lt

Security researcher Saime, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting s2.gladiatus.lt, which at the time of submission ranked 43361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

Buffer overflow

Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...

CVE-2007-4426

Live for Speed LFS S1 and S2 allows remote attackers to cause a denial of service server crash via 1 a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or 2 a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference...

[Full-disclosure] Multiple vulnerabilities in Live for Speed 0.5X10

Luigi Auriemma Application: Live for Speed http://www.lfs.net Versions: = 0.5X10 Platforms: Windows Bugs: A nickname buffer-overflow B partial track buffer-overflow C NULL pointer access in internet/hidden S1/S2 servers D memcpy NULL pointer in internet/hidden S1/S2 servers Exploitation: remote,...

lfs3-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .ply File buffer over flow Live for speed .ply file is a set up file,This file is shared amongst user's Who want stylish number plate's on there car's the buffer over flow happened with An overly long number plate string inside the .ply file.So ...

lfs2-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to get it to point to our shell code,The .spr file's are...

Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= Live for Speed S1/S2/Demo .spr file Buffer Overflow Exploit ============================================================= / 0day Live for speed patch x s2 /s1 and demo local .Spr...

CVE-2007-4140

Buffer overflow in Live for Speed LFS S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file replay file that contains a long car name...

CVE-2007-4140

CVE-2007-4140 : Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows remote attackers to execute arbitrary code via a replay file (.mpr) containing a long car name. The vulnerability is due to an overflow in the replay file handling. Exploitation details or patches are not provided ...

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

Unfixed XSS vulnerability at s2.gladiatus.net

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting s2.gladiatus.net, which at the time of submission ranked 174969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

maxwebportal136-2.txt

------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...