117 matches found
CVE-2017-17522
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is...
WIFICAM Wireless IP Camera (P2P) - Unauthenticated Remote Code Execution Exploit
Exploit for hardware platform in category remote exploits include include include include include include include include define CAMPORT 80 define REMOTEHOST "192.168.1.1" define REMOTEPORT "1337" define PAYLOAD0 "GET...
Sync Breeze Enterprise 9.9.16 Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title : Sync Breeze Enterprise 9.9.16 - 'Import Command' Buffer Overflow Discovery by : Anurag Srivastava Email : email protected Website : www.pyramidcyber.com Discovery Date : 21/08/2017 Software Link :...
Reverse Engineering Framework: radare2
Reverse Engineering Framework: radare2 r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files Radare project started as a forensics tool, a scriptable command-line hexadecimal editor able to open disk files, but later support for analyzin...
CVE-2016-2822
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...
From zero to start to learn the Win32 platform buffer overflow（Part1）-bug warning-the black bar safety net
Buffer overflow is a common and we often heard of software security vulnerabilities, buffer overflow, i.e. that the data is too much to write into the memory or buffer, when a buffer within the write data is full, if you continue to write data, the data will overflow into other buffer, it will...
CVE-2011-0284
Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...
Why Pwn2Own Is What's Right With Security
VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...
CVE-2009-1358
apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
GeoAuctions 1.0.6 Enterprise - index.php?d SQL Injection
GeoAuctions 1.0.6 Enterprise - index.php?d SQL Injection source: https://www.securityfocus.com/bid/19093/info GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A...
[eVuln] Null news SQL Injection Vulnerability
New eVuln Advisory: Null news SQL Injection Vulnerability http://evuln.com/vulns/109/summary.html --------------------Summary---------------- eVuln ID: EV0109 CVE: CVE-2006-1534 Software: Null news Sowtware's Web Site: http://nullbranded.tk/ Versions: 2005.07.27 Critical Level: Moderate Type: SQL...
FreeAmp buffer overflow
Buffer overflow on playlist parsing...
CGI bugs
No description provided...
CGI bugs
No description provided...
PHPGedView 2.61 - Multiple Remote File Inclusions
PHPGedView 2.61 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/9368/info PhpGedView is prone to multiple file include vulnerabilities. The source of the issue is that a number of scripts that ship with the software permit remote users to influence require paths for...
Multiple Heap Overflows in FTP Desktop
Multiple Heap Overflows in FTP Desktop Introduction: ============= "FTP Desktop lets you access FTP sites as if they were folders on your computer. Now you can move your files between your hard disk and remote FTP sites with greater ease." - Vendors Description http://www.ftpdesktop.com Note: FTP...
linux)zblast/xzb[v1.2]: local buffer overflow. (games)
note much explaination needed, simple overflow. vade79 - fakehalo.deadpig.org - fakehalo -- xxzb.c -- / linuxzblast/xzbv1.2: local buffer overflow. by: [email protected]. zblast/xzb is a common svgalib/X game, included on www.svgalib.org's program downloads:...
CGI bugs
No description provided...
Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (6)
Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 6 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...