KarjaSoft Sami FTP Server v2.0.2 USER Overflow

This module exploits an unauthenticated stack buffer overflow in KarjaSoft Sami FTP Server version 2.0.2 by sending an overly long USER string during login. The payload is triggered when the administrator opens the application GUI. If the GUI window is open at the time of exploitation, the payloa...

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-009 March 12, 2008 -- CVE ID: CVE-2008-1188 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoin...

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

Java Web Start tempbuff Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Web Start. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the useEncodingDecl function used while...

Java Web Start encoding Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Web Start. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the useEncodingDecl function used while...

Programmer's Notepad ctags栈缓冲区溢出漏洞

BUGTRAQ ID: 28119 Programmer's Notepad是免费的开源文本编辑器。 Programmer's Notepad在处理ctags输出时存在栈溢出漏洞，攻击者可能利用此漏洞控制用户系统。 如果用户受骗打开了特制的.c文件并使用了Jump To对话框的话，就可以触发这个溢出，导致执行任意指令。 pnotepad.org Programmer's Notepad 2.0.6.1 pnotepad.org ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Winamp Ultravox Streaming Metadata (in_mp3.dll) Buffer Overflow

This module exploits a stack buffer overflow in Winamp 5.24. By sending an overly long artist tag, a remote attacker may be able to execute arbitrary code. This vulnerability can be exploited from the browser or the Winamp client itself. This module requires Metasploit:...

GKrellM GKrellWeather 0.2.7 Plugin - Local Stack Buffer Overflow

GKrellM GKrellWeather 0.2.7 Plugin - Local Stack Buffer Overflow // source: https://www.securityfocus.com/bid/27744/info The GKrellWeather plugin for GKrellM is prone to a local stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying i...

SAP SAPLPD 6.28 Buffer Overflow

This module exploits a stack buffer overflow in SAPlpd 6.28 SAP Release 6.40 . By sending an overly long argument, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework cla...

WinComLPD Buffer Overflow

This module exploits a stack buffer overflow in WinComLPD 'WinComLPD Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in WinComLPD 'MC', 'License' = MSFLICENSE, 'References' = 'CVE', '2008-5159', 'OSVDB', '42861', 'BID', '27614', , 'DefaultOptions' = 'EXITFUNC' =...

Total Video Player 1.20 M3U File Local Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Total Video Player 1.20 M3U File Local Stack Buffer Overflow Exploit ==================================================================== /0day Total Video Player V1.20 .M3...

Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control stack buffer overflow

Overview The Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes multip...

Aurigma ImageUploader ActiveX control stack buffer overflows

Overview The Aurigma ImageUploader ActiveX control contains multiple stack buffer overflow vulnerabilities, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Aurigma ImageUploader is an ActiveX control that provides the ability to upload pictures usin...

XTACACSD report() Buffer Overflow

This module exploits a stack buffer overflow in XTACACSD 'XTACACSD report Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in XTACACSD 'MC', 'References' = 'CVE', '2008-7232', 'OSVDB', '58140', 'URL', 'http://aluigi.altervista.org/adv/xtacacsdz-adv.txt', , 'Payloa...

Debian Security Advisory DSA 1469-1 (flac)

The remote host is missing an update to flac announced via advisory DSA 1469-1. OpenVAS Vulnerability Test $Id: deb14691.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1469-1 flac Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...

Debian Security Advisory DSA 183-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 183-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 184-1 (krb4)

The remote host is missing an update to krb4 announced via advisory DSA 184-1. OpenVAS Vulnerability Test $Id: deb1841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 184-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1137-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 1137-1. Tavis Ormandy of the Google Security Team discovered several problems in the TIFF library. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2006-3459 Several stack-buffer overflows...

MS07-064 Microsoft DirectX DirectShow SAMI Buffer Overflow

This module exploits a stack buffer overflow in the DirectShow Synchronized Accessible Media Interchanged SAMI parser in quartz.dll. This module has only been tested with Windows Media Player 6.4.09.1129 and DirectX 8.0. This module requires Metasploit: https://metasploit.com/download Current...