Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks

I. SYNOPSIS Release Date: 07/19/2006 Affected Application: Cisco CallManager 3.1 and up versions prior to 3.1 were not tested but may still be vulnerable Severity If Exploited: High Impact: Arbitrary configuration of phone system/Theft of individual phone users' credentials Mitigating Factors:...

UltrVNC1.0.1.py.txt

Ultr@VNC 1.0.1 Client POC Code -- Though the Server appears safe against remote code execution, the client exploitation is trivial with OllyDbg. The following POC binds to port 5900 and executes a buffer overflow on vulnerable clients that connect. The client machine will then spawn an instance o...

Potential Buffer Overflow vulnerability in bftpd-1.0.13

There is a potential buffer overflow vulnerability in the command "SITE CHOWN" 230 User logged in. site chown AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.AAAAAAAAAA A 550 User 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA' not found. Connection closed by foreign host. gdb /usr/sbin/bftpd 18214 ............. Loade...