2149 matches found
Total Commands ISO_WinCmd插件多个远程栈溢出漏洞
Total Commander（原Windows Commander）是一款磁盘文件管理软件，可以取代资源管理器。 Total Commander的isowincmd插件在创建ISO镜像中文件的完整路径名时存在栈溢出漏洞。 溢出发生在LoadTree和ReadHeader函数中，这两个函数通过读取ISO文件中的目录项创建ISO镜像中每个文件的完整路径名。从每个目录项读取的目录名通过lstrcatA连接到一起，最后连接到文件名，然后使用不安全的lstrcpyA函数将创建的完整路径名拷贝到固定长度的栈缓冲区。...
[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability
vuln.sg Vulnerability Research Advisory isowincmd Plugin for Total Commander Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-12-30 Summary ------- A vulnerability has been found in isowincmd Total Commander Plugin. When exploited, the vulnerability allows execution of arbitrary...
AR Memberscript (usercp_menu.php) Remote File Include Vulnerability
No description provided by source. Author: ex0 armemberscript - remote file include vulnerability all versions There is no vendo patch, and doubt there will be. I havnt been able to get in touch with the vendor for 2 months armemberscript is a script used by many anime sites to manage their...
PT-2006-7073 · Midicart · Midicart
Name of the Vulnerable Software and Affected Versions: Midicart affected versions not specified Description: The issue allows remote attackers to manipulate the total price of a shopping cart by entering negative numbers in the Qty field of the viewcart function in Midicart. Recommendations: At t...
Linux Kernel 2.6.13 2.6.17.4 - logrotate prctl() Local Privilege Escalation
Linux Kernel 2.6.13 2.6.17.4 - logrotate prctl Local Privilege Escalation / $Id: raptorprctl2.c,v 1.3 2006/07/18 13:16:45 raptor Exp $ raptorprctl2.c - Linux 2.6.x suiddumpable2 logrotate Copyright c 2006 Marco Ivaldi The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4,...
Total Commander 6.x - unacev2.dll Buffer Overflow (PoC)
Total Commander 6.x - unacev2.dll Buffer Overflow PoC / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include include...
Total Commander 6.x (unacev2.dll) Buffer Overflow PoC Exploit
Exploit for unknown platform in category dos / poc ============================================================= Total Commander 6.x unacev2.dll Buffer Overflow PoC Exploit ============================================================= / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC...
Total Commander 6.x (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
Total Commander 6.x - 'unacev2.dll' Buffer Overflow (PoC)
/ -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include include unsigned char evilace =...
[SA19454] Total Commander unacev2.dll Buffer Overflow Vulnerability
TITLE: Total Commander unacev2.dll Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19454 VERIFY ADVISORY: http://secunia.com/advisories/19454/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Total Commander 6.x http://secunia.com/product/3312/ DESCRIPTION: A...
Sql injection
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE...
CVE-2006-1109
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE...
CVE-2006-1109
CVE-2006-1109: SQL injection vulnerability in index.asp of Total Ecommerce 1.0 via the id parameter allows remote arbitrary SQL execution. Root cause described as an injection vulnerability; exploitation details are not provided in the connected documents. No remediation steps, affected version i...
CVE-2006-1109
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE...
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...
CVE-2005-4066
The CVE-2005-4066 entry concerns Total Commander 6.53 storing FTP credentials in WCX_FTP.INI with weak encryption, enabling local users to decrypt passwords and access FTP servers. The vulnerability description and references consistently indicate local credential exposure as the impact; specific...
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...
Total PC Solutions PHP Rocket Add-in for FrontPage File Traversal Vulnerability
There is a vulnerability in the Total PC Solutions PHP Rocket Add-in for FrontPage that allows a remote attacker to view the contents of any arbitrary file to which the web user has access. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions might be excerpted from a...
waraxe-2004-SA004.txt
================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...
Medieval Total War <= 1.1 broadcast crash
Luigi Auriemma Application: Medieval Total War http://www.totalwar.com Versions: = 1.1 Platforms: Windows Bug: Remote crash of server and attached clients caused by long nickname Risk: Low/Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction...