10519 matches found
Liquid XML Studio 2010 <= v8.061970 - OpenFile() Remote Heap Overflow
Exploit for unknown platform in category remote exploits ====================================================================================================== Liquid XML Studio 2010 !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / /...
CVE-2009-4656
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...
Stack overflow
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...
CVE-2009-4656
DJ Studio Pro 4.2 (incl. 4.2.2.7.5) and 5.x (incl. 5.1.4.3.1) are affected by a stack-based buffer overflow in the .pls playlist handling. The root cause is insufficient bounds checking on a playlist file, allowing a long string to overflow the stack and crash the application or potentially execu...
CVE-2009-4656
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...
Worldweaver DX Studio Player shell.execute() Command Execution
This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...
Microsoft Tries to Boost SDL Adoption
Microsoft is trying to boost adoption of the software security practices in its Security Development Lifecycle by releasing a revised set of instructions to make implementation of the process easier and faster. At the Black Hat DC conference on Tuesday, the company announced the release of its...
DJ Studio Pro 5.1.6.5.2 Stack Overflow
!/usr/bin/perl Usage--file created--load file--b00m.pls BOOM print "\n"; print "! DJ Studio Pro 5.1.6.5.2 .pls Local Stack Overflow Exploit\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1500; my $filename = "b00m.pls"; open...
DJ Studio Pro 5.1.6.5.2 SEH Overwrite
!/usr/bin/perl DJ Studio Pro 5.1.6.5.2 SEH Overwrite Exploit Written By Rehan Ahmed [email protected] Vulnerability Discovered By Prodigy Software Link : http://www.e-soft.co.uk/ Tested on : Windows XP SP2 En OSVDB ID : 58159 my $file = "owned.pls"; my $junk = "A" x 1308; my $nextseh =...
MP3 Studio 1.x - .m3u Local Stack Overflow (Universal)
MP3 Studio 1.x - .m3u Local Stack Overflow Universal !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Universal Date: 01/20/2010 Author: D3V!L FUCKER Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP2 , SP3...
MP3 Studio 1.x Stack Overflow
!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de Original exploit found by HACK4LOVE...
MP3 Studio v1.X (.m3u File) Local Stack Overflow (Universal)
Exploit for unknown platform in category local exploits ============================================================ MP3 Studio v1.X .m3u File Local Stack Overflow Universal ============================================================ !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local...
MP3 Studio 1.x Universal Stack Overflow
!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Universal Date: 01/20/2010 Author: D3V!L FUCKER Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP2 , SP3 Greetz 2 : THE INJECTIOR , sarbot511 , Thrid Devil ,...
MP3 Studio 1.x - '.m3u' Local Stack Overflow (Universal)
!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Universal Date: 01/20/2010 Author: D3V!L FUCKER Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP2 , SP3 Greetz 2 : THE INJECTIOR , sarbot511 , Thrid Devil ,...
Millenium MP3 Studio 1.x - .m3u Local Stack Overflow
Millenium MP3 Studio 1.x - .m3u Local Stack Overflow !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de...
Millenium MP3 Studio v1.X (.m3u File) Local Stack Overflow
Exploit for unknown platform in category local exploits ========================================================== Millenium MP3 Studio v1.X .m3u File Local Stack Overflow ========================================================== !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stac...
Millenium MP3 Studio 1.x - '.m3u' Local Stack Overflow
!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de Original exploit found by HACK4LOVE...
[CORELAN-10-001] Audiotran 1.4.1 buffer overflow
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6740)
IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. The timezone update to 1.6.9s with the latest Fiji change. - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in ...
Discuz! 'name'参数SQL注入漏洞
Bugraq ID: 37556 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行SQL注入攻击，获得密码HASH等敏感信息。 问题是'misc.php'脚本对'name'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Comsenz Discuz! 7.x 目前没有解决方案提供： http://www.discuz.com/ !/usr/bin/perl use IO::Socket; print q Discuz Remote SQL Injection...