Lucene search
K

12 matches found

Packet Storm
Packet Storm
added 2022/12/12 12:0 a.m.249 views

Trojan-Dropper.Win32.Decay.dxv (CyberGate 1.00.0) MVID-2022-0664 Insecure Proprietary Password Encryption

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/618f28253d1268132a9f10819a6947f2.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Trojan-Dropper.Win32.Decay.dxv CyberGate v1.00.0...

0.5AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/07/26 2:13 a.m.8 views

mingusmingusmingus.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654062 Description| Value ---|--- Affected Website:| mingusmingusmingus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

0.1AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2017/02/13 12:0 a.m.0 views

Total Video Player SEH Buffer Overflow

A buffer overflow vulnerability exists in Total Video Player. The vulnerability is due to improper parsing of parameters in the Settings.ini. A remote attacker could exploit this vulnerability by enticing a user to open a malformed Settings.ini file...

5.4AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software...

7.1AI score
Exploits0
0day.today
0day.today
added 2014/02/28 12:0 a.m.17 views

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

This Metasploit module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability occurs opening malformed Settings.ini file e.g."C:\Program Files\Total Video Player". This Metasploit module has been tested successfully over Windows WinXp-Sp3-EN, Windows 7, Windows 8. This module...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2014/02/28 12:0 a.m.19 views

Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2014/02/28 12:0 a.m.19 views

Total Video Player 1.3.1 Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...

0.7AI score
Exploits0
Metasploit
Metasploit
added 2014/02/27 8:20 p.m.12 views

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

This module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability occurs opening malformed Settings.ini file e.g. "C:\Program Files\Total Video Player". This module has been tested successfully on Windows WinXp-Sp3-EN, Windows 7, and Windows 8. This module requires Metasploit:...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2013/11/24 12:0 a.m.38 views

Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software Link:...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2003/05/20 12:0 a.m.63 views

CesarFTP settings.ini Authentication Credential Plaintext Disclosure

The remote host is running CesarFTP. Due to a design flaw in the program, the plaintext usernames and passwords of FTP users are stored in the file 'settings.ini'. Any user with an account on this host may read this file and use the password to connect to this FTP server. C Tenable Network...

7.5CVSS5.5AI score0.00527EPSS
Exploits0References4
CVE
CVE
added 2002/05/03 4:0 a.m.49 views

CVE-2001-1336

CVE-2001-1336 affects CesarFTP (0.98b and earlier), where usernames and passwords are stored in plaintext in settings.ini. The underlying issue is plaintext credential storage, enabling any account on the host to read the file and gain privileges on the CesarFTP service. Connected sources corrobo...

7.5CVSS6.8AI score0.00527EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2001/05/28 4:0 a.m.16 views

CVE-2001-1336

CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges...

7.5CVSS6.8AI score0.00527EPSS
Exploits0References3
Rows per page
Query Builder