IBM Cognos tm1admsd.exe Overflow

This module exploits a stack buffer overflow in IBM Cognos Analytic Server Admin service. The vulnerability exists in the tm1admsd.exe component, due to a dangerous copy of user controlled data to the stack, via memcpy, without validating the supplied length and data. The module has been tested...

Novell ZENworks Configuration Management Preboot Service Opcode 4c Vulnerability

Added: 03/28/2012 CVE: CVE-2011-3176 BID: 52659 OSVDB: 80231 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a...

Interactive Data eSignal Stack Buffer Overflow (CVE-2011-3494)

A stack buffer overflow vulnerability exists in Interactive Data eSignal. The vulnerability is due to insufficient string length validation when copying input into a fixed size stack buffer in certain file types.A remote attacker may exploit this issue by enticing a target user to open a speciall...

FlexNet License Server Manager lmgrd Buffer Overflow

This module exploits a vulnerability in the FlexNet License Server Manager. The vulnerability is due to the insecure usage of memcpy in the lmgrd service when handling network packets, which results in a stack buffer overflow. In order to improve reliability, this module will make lots of...

Asterisk - ast_parse_digest() Stack Buffer Overflow (PoC)

Asterisk - astparsedigest Stack Buffer Overflow PoC =========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plen...

asterisk -- multiple vulnerabilities

Asterisk project reports: Stack Buffer Overflow in HTTP Manager Remote Crash Vulnerability in Milliwatt Application...

HP Data Protector Create New Folder Buffer Overflow

This module exploits a stack buffer overflow in HP Data Protector 5. The overflow occurs in the creation of new folders, where the name of the folder is handled in a insecure way by the dpwindtb.dll component. While the overflow occurs in the stack, the folder name is split in fragments in this...

VLC Media Player RealText Subtitle Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'VLC Media Player RealText Subtitle...

VLC Media Player RealText Subtitle Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

DJ Studio Pro 5.1 .pls Stack Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DJ Studio Pro 5.1 .pls Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pro 5.1...

VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC 'VLC Media Player RealText Subtitle Overflow', 'Description' = %q This module exploits a stack buffer overflow vulnerability in VideoLAN VLC MSFLICENSE, 'Author' = 'Tobias Klein', Vulnerability Discovery 'SkD', Exploit 'ju...

ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ASUS Net4Switch...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code ...

R2/Extreme 1.65 - Stack Buffer Overflow / Directory Traversal

source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code or retrieve arbitrary files within the context of the...

HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow

A remote code execution vulnerability has been reported in HP OpenView...

GLSA-201201-18 : bip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201201-18 bip: Multiple vulnerabilities Multiple vulnerabilities have been discovered in bip: Uli Schlachter reported that bip does not properly handle invalid data during authentication, resulting in a daemon crash CVE-2010-3071...

Tracker Software pdfSaver ActiveX 3.60 Buffer Overflow

Tracker Software pdfSaver ActiveX 3.60 pdfxctrl.dll Stack Buffer Overflow SEH Vendor: ------- Tracker Software Products Ltd. Product web page: ----------------- http://www.tracker-software.com Affected version: ----------------- 3.60.0128 Summary: -------- PDF-Saver Technology is a unique new...