2173 matches found
Code injection
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which causes the price of the item to be subtracted from the total cost...
SIEM for One, SIEM for All
IT security is not a luxury; it’s a necessity. While IT practitioners understand this and are on the lookout for effective security options for their network, security solutions manufacturers tend to serve the enterprise market and large companies more than they do smaller organizations and...
Total Player 3.0 M3U File Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27021/info Total Player is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but...
Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input. Successfully exploiting these issues allows...
Total Video Player 1.31 .m3u Crash PoC
No description provided by source. Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP S...
Wordpress W3 Total Cache PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
E.M. Total Video Player 1.31 - (.wav) Local Crash Exploit
No description provided by source. !/usr/bin/perl E.M. Total Video Player V1.31 .wav Local Crash Exploit Author : v3n0m Site : http://yogyacarderlink.web.id/ group : YOGYACARDERLINK Date : February, 22-2010 INDONESIA Software : E.M. Total Video Player Version : 1.31 Other versions may also be...
Medieval Total War 1.0/1.1 nickname Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0 Unicode characters to the...
Gnome Panel <= 2.28.0 - Denial of Service PoC (0day)
No description provided by source. Tested on: ubuntu 9.10 CVE : Code : / Gnome panel = 2.28.0 denial of service poc 0-day by Pietro Oliva [email protected] http://olivapietro.altervista.org After executing this poc a backup file will be created You can restore it by typing ./paneldos restore...
Practico CMS 13.7 - Auth Bypass SQL Injection
No description provided by source. | | | | | | | | | | | | | | | | | \ | | | | / / | | | | | | \ \ | | | | | | | \ | | | | / / | || | | | \ \ | || | | | | \ | | | | / / | | | | \ \ | | | | | \ | | | | / / | | | | | | \ \ | | | | | | | | \ | | | | || || || || | | || || || || \ | | | Exploit Title:...
Mini FTP Server 1.1 Buffer Corruption Remote Denial of Service
No description provided by source. !/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed code. Works with...
Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow
No description provided by source. !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software...
CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection
No description provided by source. $Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Oracle Linux 6 : kernel (ELSA-2014-0475)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0475 advisory. - scsi AACRAID Driver compat IOCTL missing capability check Jacob Tanenbaum 1033533 1033534 CVE-2013-6383 - net netfilter: nfconntrackdccp: fix...
Bypass China Mobile self-service terminal small Total-a vulnerability warning-the black bar safety net
Vulnerability details Disclosure status: 2014-03-17: details have been notified vendors and wait for manufacturers processing 2014-03-17: vendor active ignored vulnerabilities, details to a third party security partner open Brief description: That is a small total, in fact, and the old hole...
W3 Total Cache Plugin Remote Code Execution
Remote code execution vulnerability in W3 Total Cache Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH) (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...
Total Video Player 1.3.1 Buffer Overflow
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...
Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow
This Metasploit module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability occurs opening malformed Settings.ini file e.g."C:\Program Files\Total Video Player". This Metasploit module has been tested successfully over Windows WinXp-Sp3-EN, Windows 7, Windows 8. This module...