9188 matches found
Mini-Stream RM-MP3 Converter 3.1.2.1 - (.pls) Stack Buffer Overflow universal
No description provided by source. Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk=http://.\x41 x 17425; my $ret = \xCF\xDA\x05\x10; jump to ESP - from msrmfilter03.dll my $padding = \x90 x 24;...
ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC
No description provided by source. ? ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation, which includ...
Mini-Stream 3.0.1.1 - Buffer Overflow Exploit (Meta)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Mini-stream Ripper 3.0.1.1 - (.pls) Universal BOF (Python)
No description provided by source. Mini-stream Ripper 3.0.1.1 .pls Universal BOF!!! Discovered by : mrme Greetz to him ;- Written by : Jacky ! Greetz to Peter Van Eeckhoutte and Corelanc0d3r Team ! I used a UNIVERSAL Address here , so the exploit should run on many OS correctly! This Exploit is f...
EFS Easy Address Book Web Server <= 1.2 - Remote File Stream Exploit
No description provided by source. / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy Address Book Web Server ...
Linux kernel 2.2/2.4 procfs Stream Redirection to Process Memory Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2937/info The Linux /proc filesystem is a virtual filesystem provided by the Linux Kernel as an interface to some process and system information and parameters. Under certain circumstances, an access validation error may...
Mini-stream RM-MP3 Converter 3.0.0.7 - (.pls) Universal Stack BoF
No description provided by source. !/usr/bin/perl Mini-stream RM-MP3 Converter Version 3.0.0.7 .pls Universal Stack Overflow Exploit Author: mat Mail: [email protected] my $shellcode = \xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49...
IBM DB2 < 9.5 pack 3a - Data Stream Denial of Service Exploit
No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system GUEST account with QQ password shoule be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 500...
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Libxine <= 1.14 MPEG Stream Buffer Overflow Vulnerability PoC
No description provided by source. !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault. Switching to...
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
No description provided by source. Exploit Title : Mini-stream RM-MP3 Converter? V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email :...
CVE-2014-4040
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...
CVE-2014-4040
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...
openSUSE Security Update : vlc (openSUSE-SU-2014:0315-1)
VLC was updated to version 2.1.3 bnc864422 : + Core : - Fix broken behaviour with SOCKSv5 proxies - Fix integer overflow on error when using vlcreaddir + Access : - Fix DVB-T2 tuning on Linux. - Fix encrypted DVD playback. - Fix v4l2 frequency conversion. + Decoders : - Fix numerous issues M2TS,...
openSUSE Security Update : kernel (openSUSE-SU-2013:1042-1)
The openSUSE 12.2 kernel was updated to fix security issue and other bugs. Security issues fixed: CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...
openSUSE Security Update : kernel (openSUSE-SU-2013:0951-1)
The openSUSE 12.3 kernel was updated to fix a critical security issue, other security issues and several bugs. Security issues fixed: CVE-2013-2094: The perfsweventinit function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain...
OpenJDK: JPEG decoder input stream handling (2D, 8029854)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
OpenJDK: JPEG decoder input stream handling (2D, 8029854)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
CVE-2014-3042
IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service storage overlay by using a 3270 emulator to send an invalid 3270 data stream...
CVE-2014-3042
IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service storage overlay by using a 3270 emulator to send an invalid 3270 data stream...