ASUS Rog Live Service Incorrect Link Resolution Vulnerability

ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...

PHPWind Frontend SQL Injection Vulnerability

PHPWind is a set of php + mysql database to run and be able to generate html page of the open source shareware system . PHPWind front-end SQL injection vulnerability exists. Attackers can use the vulnerability to obtain sensitive database information...

Retefe Banking Trojan Resurfaces, Says Goodbye to Tor

The Retefe banking trojan resurfaced in April after going dormant for months, with a makeover that includes a move away from Tor to secure its communications as well as the abuse of a legitimate shareware application. Retefe has always stood out from other banking trojans, with a consistent...

eParakstitajs and eParaksts XML External Entity Injection Vulnerabilities

e-Me eParakstitajs is a software developed by AIT Microsoft Glossaries Team in the category Miscellaneous Shareware. An XML External Entity Injection vulnerability exists in eParakstitajs and eParaksts. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial...

Cooolsoft PowerFTP Server 2.x Remote Denial of Service Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user...

Webby Webserver - POC SEH control (0day)

No description provided by source. !/usr/bin/python POC details: SEH overwritten contact: [email protected] http://www.s3cur1ty.de App detail: http://www.shareware.de/webby-webserver/ Version 1.01 Autor Timo Gaik Lizenzart Freeware Plattformen Win XP, Win 98, Win ME Letztes Update 19.10.2004...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

No description provided by source. $Id: ultraofficehttpupload.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

ACDSee PRO 5.1 - .gif Image Processing Heap Overflow

ACDSee PRO 5.1 - .gif Image Processing Heap Overflow Application: ACDSee PRO GIF Image Processing Heap Overflow Platforms: Windows Secunia: SA48804 PRL: 2012-20 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2...

AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow (SEH)

AutoPlay 1.33 autoplay.ini - Local Buffer Overflow SEH !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

AutoPlay 1.33 Buffer Overflow

!/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks...

AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

Ultra Shareware Office Control - ActiveX HttpUpload Buffer Overflow (Metasploit)

$Id: ultraofficehttpupload.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Secure Browser 2.0 DOS Exploit

Exploit for php platform in category dos / poc ============================== Secure Browser 2.0 DOS Exploit ============================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-==-=-=-=-==-=-=-=-==-=-=-= AUTHOR : Cur53D MAIL : Hyq6xxatgmail.com DATE :...

Webby WebServer - Overflow (SEH) (PoC)

!/usr/bin/python POC details: SEH overwritten contact: [email protected] http://www.s3cur1ty.de App detail: http://www.shareware.de/webby-webserver/ Version 1.01 Autor Timo Gaik Lizenzart Freeware Plattformen Win XP, Win 98, Win ME Letztes Update 19.10.2004 Dateigroesse 701 KB import socket import sys...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

This module exploits a stack-based buffer overflow in Ultra Shareware's Office Control. When processing the 'HttpUpload' method, the arguments are concatenated together to form a command line to run a bundled version of cURL. If the command fails to run, a stack-based buffer overflow occurs when...

Stack overflow

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method...

Ultra Office Control 'HttpUpload()'方法缓冲区溢出漏洞

BUGTRAQ ID: 30861 CNCAN ID：CNCAN-2008061008 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control 'HttpUpload'方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 'HttpUpload'方法接收如下三个参数： Function HttpUpload ByVal strUrl As String , ByVal strFile As String , ByVal strPostData As...

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

ActiveKB Knowledgebase 2.? (catId) Remote SQL Injection Vulnerability

No description provided by source. ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...