LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0day

No description provided by source. html object classid='clsid:8AEEAB4A-E1DA-4354-B800-8F0B553770E1' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...

PhotoFiltre Studio X .tif file local buffer overflow PoC (0day)

No description provided by source. includestdio.h define fisier FILE define ALOCtip,n tipmallocsizeoftipn define VER 10.3.0 define POCNAME PhotoFiltre Studio X .tif file local buffer overflow poc0day define AUTHOR fl0 fl0w typedef char i8; typedef short i16; typedef int i32; void genrandomi8,cons...

TOSHIBA e-Studio 232/233/282/283 - Change Admin Password CSRF Vulnerability

No description provided by source. Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability Date: 02.10.2013 Exploit Author: Hubert Gradek PL Affected version: firmware T377SY0EXXX Tested on: TOSHIBA e-Studio 232 T377SY0E354 / 233 T377SY0E331 CVE : No CVE exists -...

Microsoft Internet Explorer 6.0 Visual Studio COM Object Instantiation Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19572/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability that occurs when instantiating Visual Studio COM objects. The vulnerability arises because of the way Internet Explorer tries to...

Eyeland Studio Inc. (game.php) SQL Injection Vulnerability

No description provided by source. Eyeland Studio Inc. game.php SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.eyeland.com/ Dork : Eyeland Studio Inc. All Rights Reserved. inurl:game.php SQL Injection:...

Datafeed Studio 'patch.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Microsoft Visual Studio Msmask32.ocx ActiveX Buffer Overflow

No description provided by source. $Id: ms08070visualstudiomsmask.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

Omnis Studio 2.4 Weak Database Field Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1255/info Omnis Studio 2.4 is a development tool for creating database applications. The tool gives developers the option to encrypt database entries. However, the encryption scheme used is weak and easily broken with any...

Cytel Studio <= 9.0.0 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Cytel Studio: StatXact / LogXact / CrossOver http://www.cytel.com/Software/LogXact.aspx http://www.cytel.com/Software/StatXact.aspx http://www.cytel.com/Software/Crossover.aspx Versions: = 9.0.0 Platforms: Windows Bugs: A strings stac...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

No description provided by source. $Id: cytelstudiocy3.rb 14041 2011-10-24 01:39:11Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Datafeed Studio 1.6.2 'search.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30660/info Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the...

Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution

No description provided by source. $Id: dxstudioplayerexec.rb 9375 2010-05-26 22:39:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

MP3 Studio 1.x - (.m3u File) Local Stack Overflow (Universal)

No description provided by source. !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Universal Date: 01/20/2010 Author: D3V!L FUCKER Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP2 , SP3 Greetz 2 : THE...

MP3 Studio 1.0 - (.mpf) Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've used address...

InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Zoner Photo Studio 15 Build 3 (Zps.exe) - Registry Value Parsing Exploit

No description provided by source. !/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link: http://www.zoner.com Tested on...

BTD Studio Zom-Mail 1.0.9 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 256 chars long file...

FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

No description provided by source. Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be...

Camtasia Studio 4.0.2 'csPreloader' Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27107/info Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the applicatio...

Microsoft Visual Studio UserControl Remote Code Execution Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/16225/info Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first...