Arbitrary file deletion

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the fileexists function...

CVE-2007-1935

CVE-2007-1935 affects ScarAdControl (ScarAdController) 1.1, where admin/index.php uses the site parameter and calls file_exists, enabling a remote attacker to execute arbitrary PHP code via UNC share or local file path. This is a PHP file inclusion vulnerability; the impact is described as arbitr...

Code injection

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

CVE-2007-1658

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp 5.12 - .pls Remote Buffer Overflow (Perl) (2)

Winamp 5.12 - .pls Remote Buffer Overflow Perl 2 !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

Exploit for unknown platform in category remote exploits ================================================================== Winamp = 5.12 Crafted PLS Remote Buffer Overflow Exploit perl ================================================================== !/usr/bin/perl -w...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6251

CVE-2006-6251 is a stack-based buffer overflow in VUPlayer (versions up to 2.49/2.44 and earlier) triggered by a crafted M3U playlist, allowing remote code execution when a user opens the file. Public exploit materials exist (Metasploit module, PoC scripts, and CERT/SEC advisories), indicating re...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow (Metasploit)

require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U 'VUPlayer %q This module exploits a stack overflow in VUPlayer 2.44 and lower. The vulnerability is caused due to a boundary error within the parsing of playlists containing an overly entries. After overwriting EIP with o...

CVE-2006-6043

PHP file inclusion vulnerability in loginform-inc.php in Oliver formerly Webshare 1.2.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the confmotdfile parameter, which is accessed by the...

Winamp Playlist UNC Path Computer Name Overflow

This module exploits a vulnerability in the Winamp media player. This flaw is triggered when an audio file path is specified, inside a playlist, that consists of a UNC path with a long computer name. This module delivers the playlist via the browser. This module has only been successfully tested ...

Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities

====================================================================== Secunia Research 17/07/2006 - VisNetic Mail Server Two File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

Directory traversal

Absolute path directory traversal vulnerability in 1 MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and 2 VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname i...

Two hidden Trojans of the new method(may be some errors, please correct me)-vulnerability warning-the black bar safety net

win9x under the device name DOS vulnerability is all week, in fact win2000 also has a similar vulnerability. We tentatively called the a vulnerability to“to the device name for the folder denial of service vulnerability”, although long ago There's this vulnerability, probably 1 year ago a friend...

WinAmp player buffer overflow

Buffer overflow on oversized computer name in UNC path of .pls on .m3u file entry. Buffer overflow on oversized WMA playlist file entry. Vulnerability can be exploited for hidden trojan installation...