GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow

Exploit Title: GOM Player Crafted ASX File Unicode Stack Buffer Overflow and Arbitrary Code Execution. Version: 2.1.33.5071 Date: 30-11-2011 Author: Debasish Mandal & Peter Van Eeckhoutte corelanc0d3r Email : [email protected] Software Link: http://www.gomlab.com/eng/GMPdownload.html Category...

jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

Medium: perl

Issue Overview: A heap-based buffer overflow flaw was found in the way Perl decoded Unicode strings. An attacker could create a malicious Unicode string that, when decoded by a Perl program, would cause the program to crash or, potentially, execute arbitrary code with the permissions of the user...

RHEL 6 : perl (RHSA-2011:1424)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1424 advisory. Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap-based buffer overflo...

Moderate: Red Hat Security Advisory: perl security update

Updated perl packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

Fedora 14 : perl-5.12.4-147.fc14 (2011-13874)

This update fixes security bug in Digest object constructor CVE-2011-3597= and in decoding Unicode string by interpreter CVE-2011-2939. ---------------------------------------------------------------------- -----= Note that Tenable Network Security has extracted the preceding description block...

Oracle DataDirect ODBC Drivers HOST属性arsqls24.dll栈缓冲区溢出漏洞

Oracle DataDirect是一款高性能商业的数据访问组件。 Oracle DataDirect中用于获取ODBC数据源信息的驱动程序在实现上存在栈缓冲区溢出，通过指定连接字符串中的超长HOST属性可触发此漏洞，在进行unicode/ASCII转换时，栈会完全崩溃。 Oracle Hyperion Performance Management and BI 11.1.2.1.0 厂商补丁： Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.oracle.com/technetwork/topics/security...

libpurple: invalid UTF-8 string handling in SILC messages

The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...

Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow

Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow !/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------...

Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow

!/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------ ------------- Found by Luigi Auriemma ---------------...

Cogent Datahub 7.1.1.63 Buffer Overflow

!/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------ ------------- Found by Luigi Auriemma ---------------...

Cogent Datahub <= v7.1.1.63 Remote Unicode Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: email protected cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ----...

Symantec Veritas Enterprise Administrator Service (vxsvc) Multiple Integer Overflows

Binary data veritasvxsvcmultiplevulnsremote.nbin...

Cogent DataHub 7.1.1.63 - Stack Overflow

Cogent DataHub 7.1.1.63 - Stack Overflow Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected]...

Cogent DataHub 7.1.1.63 - Stack Overflow

Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

MelOn Player 1.0.11.x - Denial of Service (PoC)

MelOn Player 1.0.11.x - Denial of Service PoC Exploit Title: MelOn Player 1.0.11.x Denial of Service POC Date: 09/09/2011 Author: modpr0be Software Link: http://www.melon.co.id/cs/guide/download/player.do Vulnerable version: 1.0.11.x Tested on: Windows XP SP3 VirtualBox 4.1.0 r73009 CVE : N/A...

Cogent-Datahub

Cogent Datahub v7.1.1.63 Remote Unicode Buffer Overflow Exploit ToDo: Add remote shell ToDo: Test vulnerable targets import socket,time,sys,os bindshell on port 1337 shellcodez = "PPYAIAIAIAIAQATAXAZAPA3QADAZABARALAYAIAQA" "IAQAPA5AAAPAZ1AI1AIAIAJ11AIAIAXA58AAPAZABABQI1AIQIAIQI1"...

MelOn Player 1.0.11.x - Denial of Service (PoC)

Exploit Title: MelOn Player 1.0.11.x Denial of Service POC Date: 09/09/2011 Author: modpr0be Software Link: http://www.melon.co.id/cs/guide/download/player.do Vulnerable version: 1.0.11.x Tested on: Windows XP SP3 VirtualBox 4.1.0 r73009 CVE : N/A Thanks: offsec, exploit-db, corelan-team, 5M7X,...

DEBIAN-CVE-2011-2932

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...

CVE-2011-2932

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...