CVE-2010-4980

SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

Exploit writing tutorial part 3 - SEH Based Exploits [RUS by p(eaZ]

Автор: Peter Van Eeckhoutte corelanc0d3r Перевод: peaZ 8/2011 В первых двух частях данного руководства, мы обсудили, как происходят классические переполнения буфера в стеке, и каким образом можно создать надежный эксплойт с использованием различных методик перехода к шеллкоду. Пример, который мы...

[SECURITY] Fedora 14 Update: dokuwiki-0-0.8.20110525.a.fc14

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

[SECURITY] Fedora 14 Update: TeXmacs-1.0.7.9-2.fc14

GNU TeXmacs is a free scientific text editor, which was both inspired by TeX and GNU Emacs. The editor allows you to write structured documents via a WYSIWYG what-you-see-is-what-you-get and user friendly interface. New styles may be created by the user. The program implements high-quality...

[SECURITY] Fedora 15 Update: TeXmacs-1.0.7.9-2.fc15

GNU TeXmacs is a free scientific text editor, which was both inspired by TeX and GNU Emacs. The editor allows you to write structured documents via a WYSIWYG what-you-see-is-what-you-get and user friendly interface. New styles may be created by the user. The program implements high-quality...

AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow (SEH)

AutoPlay 1.33 autoplay.ini - Local Buffer Overflow SEH !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

AutoPlay 1.33 Buffer Overflow

!/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks...

AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Summary AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks. Description The program suffers from a buffer overflow vulnerability when openinng autorun file .ini, as a result of adding extra bytes to parts of the edited file, giving...

AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

Foxit PDF Reader 4.1.1 - Title Stack Buffer Overflow (Metasploit)

$Id: foxittitlebof.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Foxit PDF Reader v4.1.1 Title Stack Buffer Overflow

$Id: foxittitlebof.rb 11096 2010-11-22 17:43:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Gekko Manager FTP Client - Remote Stack Buffer Overflow (Metasploit)

$Id: gekkomgrlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTP Synchronizer Professional 4.0.73.274 - Remote Stack Buffer Overflow (Metasploit)

$Id: ftpsynchlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTPGetter Standard 3.55.0.05 - Remote Stack Buffer Overflow (PWD) (Metasploit)

$Id: ftpgetterpwdreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTPShell 5.1 - Remote Stack Buffer Overflow (Metasploit)

$Id: ftpshell51pwdreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Seagull FTP v3.3 build 409 Stack Buffer Overflow

$Id: seagulllistreply.rb 10661 2010-10-12 18:40:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTPShell 5.1 Stack Buffer Overflow

$Id: ftpshell51pwdreply.rb 10660 2010-10-12 18:39:21Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...