Lucene search
+L

5600 matches found

ThreatPost
ThreatPost
added 2009/12/29 9:51 p.m.13 views

Mozilla Firefox

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2009/12/29 9:51 p.m.9 views

Mozilla Firefox

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...

6.6AI score
SaveExploits0
seebug.org
seebug.org
added 2009/12/28 12:0 a.m.22 views

M.J.M. Quick Player v1.2 Stack BOF

No description provided by source. Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows Product : M.J.M...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/28 12:0 a.m.47 views

M.J.M. Quick Player 1.2 - Local Stack Buffer Overflow

Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows Product : M.J.M. Quick Player Versions affected : 1.2...

5.8AI score
SaveExploits0
Metasploit
Metasploit
added 2009/12/13 6:56 a.m.127 views

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

This module attempts to to bypass authentication using the WebDAV IIS6 Unicode vulnerability discovered by Kingcope. The vulnerability appears to be exploitable where WebDAV is enabled on the IIS6 server, and any protected folder requires either Basic, Digest or NTLM authentication. This module...

7.5CVSS7.3AI score0.98161EPSS
SaveExploits7
OSV
OSV
added 2009/12/04 12:0 a.m.17 views

UBUNTU-CVE-2009-3560

The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service application crash via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlo...

5CVSS6.9AI score0.24313EPSS
SaveExploits2References8
Exploit DB
Exploit DB
added 2009/11/21 12:0 a.m.32 views

AIMP2 Audio Converter 2.53 build 330 - Playlist '.pls' Unicode Buffer Overflow

!/usr/bin/python Author contact : seeleymagicathotmaildotcom For educational purposes only You have been warned My original crash breakdown: EAX 001B0020 UNICODE "AAAAAAAAAAAAAAAAAAAA ECX 00000273 EDX 00000C4C EBX 00000000 ESP 0012DCA8 EBP 0012DD64 ESI 001B6610 UNICODE "AAAAAAAAAAAAAAAAAAAA EDI...

9.3CVSS5.8AI score0.15351EPSS
SaveExploits4
exploitpack
exploitpack
added 2009/11/21 12:0 a.m.18 views

AIMP2 Audio Converter 2.53 build 330 - Playlist .pls Unicode Buffer Overflow

AIMP2 Audio Converter 2.53 build 330 - Playlist .pls Unicode Buffer Overflow !/usr/bin/python Author contact : seeleymagicathotmaildotcom For educational purposes only You have been warned My original crash breakdown: EAX 001B0020 UNICODE "AAAAAAAAAAAAAAAAAAAA ECX 00000273 EDX 00000C4C EBX 000000...

0.3AI score
SaveExploits0
zdt
zdt
added 2009/11/21 12:0 a.m.38 views

AIMP2 Audio Converter <= 2.53 build 330 Playlist (.pls) Unicode BOF

Exploit for unknown platform in category local exploits =================================================================== AIMP2 Audio Converter = 2.53 build 330 Playlist .pls Unicode BOF =================================================================== Title: AIMP2 Audio Converter = 2.53 buil...

6.8AI score0.15351EPSS
SaveExploits4
seebug.org
seebug.org
added 2009/11/21 12:0 a.m.17 views

AIMP2 Audio Converter &lt;= 2.53 build 330 Playlist (.pls) Unicode BOF

No description provided by source. !/usr/bin/python Author contact : seeleymagicathotmaildotcom For educational purposes only You have been warned My original crash breakdown: EAX 001B0020 UNICODE "AAAAAAAAAAAAAAAAAAAA ECX 00000273 EDX 00000C4C EBX 00000000 ESP 0012DCA8 EBP 0012DD64 ESI 001B6610...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/11/17 12:0 a.m.18 views

AIMP2 Audio Converter Playlist Buffer Overflow

Vulnerability : AIMP2 Audio Converter Playlist pls BOF Discovered by : mrme http://milw0rm.com/exploits/9561 Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit written : nov 7th, 2009 Sploit released : nov 11th, 2009 Type : local and remote code execution OS : Windows Product : AIM...

0.7AI score
SaveExploits0
zdt
zdt
added 2009/11/16 12:0 a.m.18 views

AIMP2 Audio Converter Playlist (SEH)

Exploit for unknown platform in category local exploits ==================================== AIMP2 Audio Converter Playlist SEH ==================================== Title: AIMP2 Audio Converter Playlist SEH CVE-ID: OSVDB-ID: Author: corelanc0d3r Published: 2009-11-16 Verified: yes view source...

6.8AI score
SaveExploits0
Prion
Prion
added 2009/11/10 7:30 p.m.17 views

Buffer overflow

Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

7.5CVSS8.2AI score0.02692EPSS
SaveExploits1References4Affected Software2
CVE
CVE
added 2009/11/10 7:0 p.m.66 views

CVE-2009-2833

The CVE-2009-2833 entry describes a buffer overflow in the UCCompareTextDefault API of International Components for Unicode used by Apple Mac OS X 10.5.8. The vulnerability affects the UCCompareTextDefault function in ICU; exploitation could lead to an application crash or arbitrary code executio...

7.5CVSS7.8AI score0.02692EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2009/10/29 2:30 p.m.21 views

CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

9.3CVSS5.5AI score0.03183EPSS
SaveExploits2References14
Prion
Prion
added 2009/10/29 2:30 p.m.25 views

Code injection

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

9.3CVSS6.3AI score0.03183EPSS
SaveExploits2References14Affected Software2
Cvelist
Cvelist
added 2009/10/29 2:0 p.m.35 views

CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

6.6AI score0.03183EPSS
SaveExploits2References14
CVE
CVE
added 2009/10/29 2:0 p.m.142 views

CVE-2009-3376

CVE-2009-3376 affects Mozilla Firefox (before 3.0.15 and 3.5.x before 3.5.4) and SeaMonkey (before 2.0). The root cause is improper handling of a right-to-left override (RLO, U+202E) Unicode character in a download filename, which can cause the displayed name to differ from the actual filename. T...

9.3CVSS6.3AI score0.03183EPSS
SaveExploits2References14Affected Software2
UbuntuCve
UbuntuCve
added 2009/10/29 12:0 a.m.43 views

CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

9.3CVSS6.9AI score0.03183EPSS
SaveExploits2References3
Check Point Advisories
Check Point Advisories
added 2009/10/25 12:0 a.m.8 views

Mozilla Products IDN Spoofing (CVE-2005-0233)

The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...

7.5CVSS6.2AI score0.20398EPSS
SaveExploits1
Rows per page
Query Builder