glibc catopen() Unbounded Stack Allocations

glibc catopen Multiple unbounded stack allocations URL: https://cxsecurity.com/issue/WLB-2016010149 --------------------------------------- PoC: include include include int main char buff; buff=malloc11111111; memsetbuff,'A',11111110; buff11111110='\0'; catopenbuff, NLCATLOCALE; return 0;...

Adobe Flash - NetConnection.connect Use-After-Free

Adobe Flash - NetConnection.connect Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=352&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id If the fpadInfo property of a NetConnection object is a SharedObject, a use-after-free occurs...

WM Downloader 3.0.0.9 - Buffer Overflow (Meta)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

openSUSE Security Update : lcms (openSUSE-SU-2013:1547-1)

Some minor stackoverflows in lcms utilities were fixed. CVE-2013-4276. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-757. The text description of this plugin is C SUSE LLC...

Learn How DuckDuckGo Search Engine helps you to be a Good Programmer

So you want to be a Programmer? Want to learn - How to code, Debug, and Program? The Web is full of free resources that can turn you into a programmer in no time, but never knew Where to start or How to troubleshoot your programs. Learning How to be a good programmer begins with learning logic...

iTunes m3u Playlist Overflow

Added: 07/03/2012 CVE: CVE-2012-0677 BID: 53933 OSVDB: 82897 Background iTunes is a free media player for multiple platforms. Problem iTunes does not properly validate parameters for EXTINF: directives in m3u files. This results in an exploitable stack overflow. Resolution Upgrade to iTunes 10.6....

DSquare Exploit Pack: D2SEC_HPPM2

Name| d2sechppm2 ---|--- CVE| CVE-2009-3999 Exploit Pack| D2ExploitPack Description| HP Power Manager Export Logs Stack Overflow Vulnerability Notes|...

WebLogic 10.0 Mod_wl 远程POST数据导致栈溢出

No description provided by source...

libxml multiple security vulnerability

Memory use-after-free, stack overflow exhaustion...

MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= MP3 Studio 1.0 .mpf /.m3u File Local Stack Overflow PoC ========================================================= !/usr/bin/perl Found By :: HACK4LOVE MP3 Studio v 1.0 .mpf /.m3u File Loca...

M3U/M3L to ASX/WPL 1.1 (ASX M3U M3L) Local BOF PoC

No description provided by source. !/usr/bin/perl M3U/M3L to ASX/WPL v1.1 asx,m3u,m3l Local Stack Overflow POC Download: http://proletsoft.freeservers.com/mmb/m3utoasx.html Welcom Back Milw0rm my $crash="\x41" x 5000 ; openmyfile,'PoC.m3u';asx,m3u,m3l print myfile $crash; By ThE g0bL!N Ismail Fih...

DSquare Exploit Pack: D2SEC_SAPGUI

Name| d2secsapgui ---|--- CVE| CVE-2008-4387 Exploit Pack| D2ExploitPack Description| SAP AG SAPgui mdrmsap.dll ActiveX Stack Overflow Notes|...

SuSE 10 Security Update : gv (ZYPP Patch Number 2267)

A stackoverflow in the postscript viewer gv could be used to exploited to execute code, if the user could be tricked into viewing a prepared postscript file. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : libpng (libpng-2322)

The sPLT chunk handling in libpng was incorrect and a handcrafted PNG file could be use to cause an out-of-bounds read, effectively crashing the PNG viewer or webbrowser. CVE-2006-5793 Additionaly a 2 byte stackoverflow was fixed which we do not believe to be exploitable. It will cause an abort o...

openSUSE 10 Security Update : gv (gv-2266)

A stackoverflow in the postscript viewer gv could be used to exploited to execute code, if the user could be tricked into viewing a prepared postscript file. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

eCentrex VOIP Client UACOMX.OCX ActiveX控件栈溢出漏洞

BUGTRAQ ID: 25383 eCentrex VOIP Client是一款网络电话客户端软件。 eCentrex VOIP Client的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 eCentrex SIP UA Com模块（euacom.dll）在处理传送给eCentrex VOIP Client组件ActiveX控件（uacomx.ocx）的ReInit方式的超长参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页，就可能触发这个溢出，导致执行任意指令。 eCentrex VOIP Client ActiveX 2.0.1...

RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow PoC

No description provided by source. !-- author: axis site: http://www.ph4nt0m.org -- smil xmlns="http://www.w3.org/2000/SMIL20/CR/Language" body par...

Microsoft Windows Animated Cursor Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Microsoft Windows Animated Cursor Stack Overflow Exploit ======================================================== !/usr/bin/env python $Id: win32-loadaniicon.py 4 2007-06-02 00:47:59Z...

CentOS 3 / 4 : gnupg (CESA-2006:0754)

Updated GnuPG packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Tavis Ormandy discovered a stack overwrite flaw in t...

Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

7245 correctly resolves this issue; standard stack overflow in WZFILEVIEW.FilePattern snatching EIP; PoC below; HTML HEAD TITLE/TITLE /HEAD BODY SCRIPT LANGUAGE="VBScript" !-- Sub WZFILEVIEWOnAfterItemAddItem WZFILEVIEW.FilePattern = "SMASHTHESTACKHERE" end sub -- /SCRIPT OBJECT ID="WZFILEVIEW"...