Thunder Kankan Player 4.8.3.840 - Stack Overflow / Denial of Service

!/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :\ \ /::\ 1 1 /:/:\ /\ /:/:...

Thunder Kankan Player Denial Of Service

!/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :\ \ /::\ 1 1 /:/:\ /\ /:/:...

Thunder kankan player(迅雷看看) Stack overflow/DOS Exploit

No description provided by source. !/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/...

Thunder kankan player Stack overflow/DOS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ ...

[SECURITY] [DSA-2210-2] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2210-2 [email protected] http://www.debian.org/security/ Luciano Bello June 25, 2011 http://www.debian.org/security/faq -...

xAurora 10.00 - 'RSRC32.dll' DLL Loading Arbitrary Code Execution

/ source: https://www.securityfocus.com/bid/48432/info xAurora is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

xAurora Web Browser 10.00 DLL Hijack

/ Exploit : xAurora Web Browser v10.00 rsrc32.dll DLL Hijacking Exploit Software : xAurora Web Browser v10.00 Build 12:10:2005 - Powered By ICTA Language : Win32-Assembly Language Download :...

Fedora 14 : mingw32-libtiff-3.9.5-1.fc14 (2011-5962)

Update MinGW Windows cross-compiled libtiff to 3.9.5, incorporating most of our previous patches. Includes a fix for CVE-2011-1167: A flaw was reported in libtiff's thunder decoder. The thunder decoder assumes 4bits per pixel, but if a file has bitpersample set to a smaller value, or defaulted 1...

SuSE9 Security Update : libtiff (YOU Patch Number 12702)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool. CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

Mandriva Linux Security Advisory : libtiff (MDVSA-2011:064)

Multiple vulnerabilities were discovered and corrected in libtiff : Buffer overflow in LibTIFF allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding CVE-2011-0191. Heap-based buffer overflow in the thunder aka...

libtiff: heap-based buffer overflow in thunder decoder (ZDI-11-107)

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

DEBIAN-CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CMD CMS 1.4 SQL Injection

Exploit Title : CMD CMS v1.4 SQL Injection Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 21-02-2011 HomePage : www.indishell.in Version : 1.4 , 2.0 Tested on : Balianti, Inc. Vulnerability Style : CMD CMS Sql Injection Vunerability...

PHP-CMS 1.2 / 3.0 SQL Injection

Exploit Title : content Management PHPCMS 3.0 Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection Vunerability...

Geomi CMS 1.2/3.0 - SQL Injection

Exploit Title : Geomi CMS by Tridan IT Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection Vunerability Vendor:...

I-COM 1.0 Local File Inclusion

Exploit Title : I-COM web Development LFI Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 10-01-2011 HomePage : www.indishell.in Verstion : 1.0 Tested on : Sites By I-com Vulnerability Style : local file inclusion Vulnerability Dir : Directory traversal Greetz To...

Caedo HTTPd Server 0.5.1 ALPHA Remote File Download

!/usr/bin/perl use LWP::Simple; Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download Exploit Author : Zer0 Thunder if @ARGV $file"; print FILE $result; close FILE; print " File Saved : $file \n\n"; print "---------------------------------------------\n"; print "site : zt-security.com -...

Caedo HTTPd Server 0.5.1 ALPHA - Arbitrary File Download

Caedo HTTPd Server 0.5.1 ALPHA - Arbitrary File Download !/usr/bin/perl use LWP::Simple; Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download Exploit Author : Zer0 Thunder if @ARGV $file"; print FILE $result; close FILE; print " File Saved : $file \n\n"; print...

Build a Niche Store 3.0 - 'BANS' Authentication Bypass

Exploit Title : Build a Niche Store v3.0 BANS Authentication Bypass Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 13-11-2010 HomePage : www.indishell.in Price : $49.95 Version : 3.0 Software: http://www.buildanichestore.com/ Vulnerability Style : Authentication...