Lucene search
+L

563 matches found

Cvelist
Cvelist
added 2009/03/12 3:00 p.m.26 views

CVE-2009-0885

Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in a 1 M3U, 2 M3l, 3 TXT, and 4 LRC playlist file...

7.9AI score0.08747EPSS
SaveExploits2References9
seebug.org
seebug.org
added 2009/03/02 12:00 a.m.25 views

Media Commands (M3U M3l TXT LRC Files) Local Heap Overflow PoC

No description provided by source. !usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program...

7.1AI score
SaveExploits0
zdt
zdt
added 2009/03/02 12:00 a.m.34 views

Media Commands (M3U,M3l,TXT,LRC Files) Local Heap Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== Media Commands M3U,M3l,TXT,LRC Files Local Heap Overflow PoC ============================================================== !usr/bin/perl Discovered & Coded by : Hakxer Media Commands...

7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2009/02/22 12:00 a.m.25 views

DNS TXT Record Parsing Buffer Overflow (CVE-2008-2469)

The Domain Name System DNS client service resolves and caches DNS names. LibSPF2 is a widely deployed implementation of Sender Policy Framework SPF. A buffer overflow vulnerability was reported in LibSPF2. An attacker who runs a malicious DNS server can exploit this vulnerability by sending a...

10CVSS6.9AI score0.2225EPSS
SaveExploits3
NVD
NVD
added 2009/01/07 7:30 p.m.19 views

CVE-2009-0066

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology TXT allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable...

7.6CVSS6.9AI score0.02194EPSS
SaveExploits0References4
CVE
CVE
added 2009/01/07 7:00 p.m.72 views

CVE-2009-0066

Technical details for CVE-2009-0066 are not publicly available in the provided documents; no concrete information on affected products, components, root cause, impact, or remediation is present. Monitor for updates.

7.6CVSS7AI score0.02194EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2009/01/07 7:00 p.m.35 views

CVE-2009-0066

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology TXT allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable...

6.9AI score0.02194EPSS
SaveExploits0References4
exploitpack
exploitpack
added 2009/01/06 12:00 a.m.25 views

Rosoft Media Player 4.2.1 - Local Buffer Overflow

Rosoft Media Player 4.2.1 - Local Buffer Overflow Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the...

0.7AI score
SaveExploits0
zdt
zdt
added 2009/01/06 12:00 a.m.20 views

Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit ======================================================= Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2008/12/19 12:00 a.m.14 views

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit...

0.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/15 12:00 a.m.27 views

Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities

No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/12/14 12:00 a.m.31 views

Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Simple Text-File Login script 1.0.6 DD/RFI Multiple Vulnerabilities ===================================================================== START 0x01 Informations: Script...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/10/31 12:00 a.m.43 views

Google Chrome Web Browser FTP Client XSS Vulnerability

The host is installed with Goole Chrome Web Browser and is prone to Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeftpclntxssvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ Google Chrome Web Browser FTP Client XSS Vulnerability Authors: Veerendra GG Copyright:...

4.3CVSS5.8AI score0.00663EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2008/10/31 12:00 a.m.17 views

GLSA-200810-03 : libspf2: DNS response buffer overflow

The remote host is affected by the vulnerability described in GLSA-200810-03 libspf2: DNS response buffer overflow libspf2 uses a fixed-length buffer to receive DNS responses and does not properly check the length of TXT records, leading to buffer overflows. Impact : A remote attacker could store...

10CVSS6.2AI score0.2225EPSS
SaveExploits3References2
CERT
CERT
added 2008/10/30 12:00 a.m.43 views

libspf2 DNS TXT record parsing buffer overflow

Overview libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. Description libspf2 is a widely-deployed implementation of the Sender Policy Framework. According to RFC 4408: An SPF record is a DNS Resource Record RR that declares which hosts are, and are not,...

10CVSS7.3AI score0.2225EPSS
SaveExploits3References3
seebug.org
seebug.org
added 2008/10/27 12:00 a.m.100 views

libspf2 DNS TXT记录处理堆溢出漏洞

BUGTRAQ ID: 31881 CVECAN ID: CVE-2008-2469 libspf2是用于实现Sender Policy Framework的库,允许邮件系统检查SPF记录并确认邮件已经过域名授权。 libspf2库的Spfdnsresolv.c文件中的SPFdnsresolvlookup函数存在堆溢出漏洞,如果用户解析了带有特制长度字段的超长DNS TXT记录的话,就可能触发这个溢出,导致执行任意代码。 DNS...

10CVSS6.8AI score0.2225EPSS
SaveExploits3
NVD
NVD
added 2008/10/23 10:00 p.m.31 views

CVE-2008-4724

Multiple cross-site scripting XSS vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are obtained...

4.3CVSS5.3AI score0.00663EPSS
SaveExploits2References1
NVD
NVD
added 2008/10/23 10:00 p.m.37 views

CVE-2008-4723

Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are...

4.3CVSS5.5AI score0.00832EPSS
SaveExploits2References1
NVD
NVD
added 2008/10/23 10:00 p.m.12 views

CVE-2008-2469

Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...

10CVSS7.8AI score0.2225EPSS
SaveExploits3References18
UbuntuCve
UbuntuCve
added 2008/10/23 10:00 p.m.28 views

CVE-2008-2469

Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...

10CVSS6.2AI score0.2225EPSS
SaveExploits3References1
Rows per page
Query Builder