Lucene search
+L

4857 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/24 12:00 a.m.•4 views

CVE-2006-3814: Undefined Security Weakness

Buffer overflow in the LoaderXM::loadinstrumentinternal function in loaderxm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data...

5.1CVSS6.5AI score0.06732EPSS
SaveExploits2References1
securityvulns
securityvulns
•added 2006/07/24 12:00 a.m.•55 views

Buffer-overflow in the XM loader of Cheese Tracker 0.9.9

Luigi Auriemma Application: Cheese Tracker http://reduz.com.ar/cheesetracker/ http://sourceforge.net/projects/cheesetronic Versions: = 0.9.9 and current CVS Platforms: nix and others Bug: buffer-overflow in LoaderXM::loadinstrumentinternal Exploitation: local Date: 23 Jul 2006 Author: Luigi...

1.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/07/23 12:00 a.m.•45 views

Cheese Tracker 0.9.9 - Local Buffer Overflow

Cheese Tracker 0.9.9 - Local Buffer Overflow / by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ +...

0.9AI score
SaveExploits0
zdt
zdt
•added 2006/07/23 12:00 a.m.•46 views

Cheese Tracker <= 0.9.9 Local Buffer Overflow Exploit PoC

Exploit for unknown platform in category local exploits ========================================================= Cheese Tracker include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow defi...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/07/23 12:00 a.m.•46 views

Cheese Tracker 0.9.9 - Local Buffer Overflow

/ by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ + OVERFLOW - CPOS define myzerox memsetx, 0,...

5.1CVSS5.8AI score0.06732EPSS
SaveExploits2
seebug.org
seebug.org
•added 2006/07/23 12:00 a.m.•64 views

Cheese Tracker &lt;= 0.9.9 Local Buffer Overflow Exploit PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...

7.1AI score
SaveExploits0
NVD
NVD
•added 2006/07/18 3:47 p.m.•17 views

CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.6CVSS7.6AI score0.10119EPSS
SaveExploits2References10
UbuntuCve
UbuntuCve
•added 2006/07/18 3:47 p.m.•20 views

CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.6CVSS6.2AI score0.10119EPSS
SaveExploits2References1
OSV
OSV
•added 2006/07/18 3:47 p.m.•8 views

DEBIAN-CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.6CVSS7.9AI score0.10119EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2006/07/17 9:00 p.m.•32 views

CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.5AI score0.10119EPSS
SaveExploits2References10
Debian CVE
Debian CVE
•added 2006/07/17 9:00 p.m.•37 views

CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.6CVSS7.6AI score0.10119EPSS
SaveExploits2
NVD
NVD
•added 2006/06/27 10:05 a.m.•23 views

CVE-2006-3230

Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...

2.6CVSS5.7AI score0.02127EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2006/06/27 10:00 a.m.•31 views

CVE-2006-3230

Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...

5.7AI score0.02127EPSS
SaveExploits1References7
CVE
CVE
•added 2006/06/27 10:00 a.m.•49 views

CVE-2006-3230

CVE-2006-3230 describes a cross-site scripting (XSS) vulnerability in index.tmpl of Azureus Tracker (Java BitTorrent Client Tracker) versions 2.4.0.2 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry provides the affected softwar...

2.6CVSS6AI score0.02127EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/27 12:00 a.m.•7 views

CVE-2006-3230: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...

2.6CVSS6AI score0.02127EPSS
SaveExploits1References1
NVD
NVD
•added 2006/05/22 7:02 p.m.•26 views

CVE-2006-2509

SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.3AI score0.01114EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2006/05/22 7:00 p.m.•38 views

CVE-2006-2509

SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.3AI score0.01114EPSS
SaveExploits0References2
CVE
CVE
•added 2006/05/22 7:00 p.m.•71 views

CVE-2006-2510

CVE-2006-2510 is an XSS vulnerability in the URL submission form of YourFreeWorld.com Short Url & Url Tracker Script. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified URL submission form. The connected documents do not provide explicit product version, e...

6.8CVSS5.8AI score0.01295EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2006/05/22 7:00 p.m.•59 views

CVE-2006-2509

The CVE-2006-2509 entry concerns YourFreeWorld.com Short Url & Url Tracker Script. The vulnerable component is login.php, where the id parameter allows SQL injection, enabling remote attackers to execute arbitrary SQL commands. The available references describe the issue as a SQL injection affect...

7.5CVSS8.3AI score0.01114EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2006/05/22 7:00 p.m.•39 views

CVE-2006-2510

Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...

5.8AI score0.01295EPSS
SaveExploits0References3
Rows per page
Query Builder