6563 matches found
Oracle DataDirect ODBC Drivers HOST属性arsqls24.dll栈缓冲区溢出漏洞
Oracle DataDirect是一款高性能商业的数据访问组件。 Oracle DataDirect中用于获取ODBC数据源信息的驱动程序在实现上存在栈缓冲区溢出，通过指定连接字符串中的超长HOST属性可触发此漏洞，在进行unicode/ASCII转换时，栈会完全崩溃。 Oracle Hyperion Performance Management and BI 11.1.2.1.0 厂商补丁： Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.oracle.com/technetwork/topics/security...
libpurple: invalid UTF-8 string handling in SILC messages
The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...
Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow
Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow !/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------...
Cogent Datahub 7.1.1.63 Buffer Overflow
!/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------ ------------- Found by Luigi Auriemma ---------------...
Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow
!/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: mrme@neptune cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ------ ------------- Found by Luigi Auriemma ---------------...
Cogent Datahub <= v7.1.1.63 Remote Unicode Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python Cogent Datahub @netninja || @luigiauriemma example usage: email protected cognet$ ./cognetoverflow.py 192.168.114.130 ----------------------------------------------------- ------ Cogent Datahub Unicode Overflow Exploit ----...
Symantec Veritas Enterprise Administrator Service (vxsvc) Multiple Integer Overflows
Binary data veritasvxsvcmultiplevulnsremote.nbin...
Cogent DataHub 7.1.1.63 - Stack Overflow
Cogent DataHub 7.1.1.63 - Stack Overflow Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected]...
Cogent DataHub 7.1.1.63 - Stack Overflow
Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...
Cogent-Datahub
Cogent Datahub v7.1.1.63 Remote Unicode Buffer Overflow Exploit ToDo: Add remote shell ToDo: Test vulnerable targets import socket,time,sys,os bindshell on port 1337 shellcodez = "PPYAIAIAIAIAQATAXAZAPA3QADAZABARALAYAIAQA" "IAQAPA5AAAPAZ1AI1AIAIAJ11AIAIAXA58AAPAZABABQI1AIQIAIQI1"...
MelOn Player 1.0.11.x - Denial of Service (PoC)
MelOn Player 1.0.11.x - Denial of Service PoC Exploit Title: MelOn Player 1.0.11.x Denial of Service POC Date: 09/09/2011 Author: modpr0be Software Link: http://www.melon.co.id/cs/guide/download/player.do Vulnerable version: 1.0.11.x Tested on: Windows XP SP3 VirtualBox 4.1.0 r73009 CVE : N/A...
MelOn Player 1.0.11.x - Denial of Service (PoC)
Exploit Title: MelOn Player 1.0.11.x Denial of Service POC Date: 09/09/2011 Author: modpr0be Software Link: http://www.melon.co.id/cs/guide/download/player.do Vulnerable version: 1.0.11.x Tested on: Windows XP SP3 VirtualBox 4.1.0 r73009 CVE : N/A Thanks: offsec, exploit-db, corelan-team, 5M7X,...
DEBIAN-CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
Cross site scripting
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
CVE-2011-2932
CVE-2011-2932 is a cross-site scripting (XSS) vulnerability in Ruby on Rails’ activesupport core:_string/output_safety.rb, linked to a UTF-8 escaping issue. Affected versions include Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5. The issue enables remote injection of sc...
CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...
CVE-2011-2932
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a malformed Unicode string, related to a...