VLC Media Player smb:// URI Remote Stack Overflow

!/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: http://sourceforge.net/projects/vlc/files/1.1.4/win32/vlc-1.1.4-win32.exe/download?usemirror=garr Version: VLC Media...

VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Stack Overflow PoC

Exploit for python platform in category dos / poc ======================================================================= VLC Media Player 1.1.4 .xspf smb:// URI Handling Stack Overflow PoC ======================================================================= !/usr/bin/python Exploit Title: VLC...

VideoLAN VLC Media Player 1.1.4 - .xspf smb: URI Handling Remote Stack Overflow (PoC)

VideoLAN VLC Media Player 1.1.4 - .xspf smb: URI Handling Remote Stack Overflow PoC !/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link:...

VideoLAN VLC Media Player < 1.1.4 - '.xspf smb://' URI Handling Remote Stack Overflow (PoC)

!/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: http://sourceforge.net/projects/vlc/files/1.1.4/win32/vlc-1.1.4-win32.exe/download?usemirror=garr Version: VLC Media...

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input...

Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution

source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to inject and execute arbitrary JSP...

Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow

This module exploits a buffer overflow in Apple QuickTime 7.6.6. When processing a malformed SMIL uri, a stack-based buffer overflow can occur when logging an error message. Module Options msf use exploit/windows/browser/apple/quicktimesmildebug msf undefinedquicktimesmildebug show actions...

uzbl uzbl-core - @SELECTED_URI Mouse Button Bindings Command Injection

uzbl uzbl-core - @SELECTEDURI Mouse Button Bindings Command Injection source: https://www.securityfocus.com/bid/42297/info uzbl 'uzbl-core' is prone to a vulnerability that lets attackers inject arbitrary commands because the application fails to adequately sanitize user-supplied input. This issu...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

K-Meleon 1.x - URI Handling Multiple Denial of Service Vulnerabilities

K-Meleon 1.x - URI Handling Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/42200/info K-Meleon is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to crash the...

CVE-2010-2320

bozotic HTTP server aka bozohttpd before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with / sequences...

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

Exploit for windows platform in category remote exploits ============================================================ Xerver 4.32 Source Disclosure and HTTP Authentication Bypass ============================================================ Exploit Title: Xerver Source Disclosure and HTTP Auth...

Mongoose URI Trailing Slash Request Source Code Disclosure

The version of the Mongoose web server running on the remote host discloses the source code of files such as PHP scripts when a trailing slash '/' is appended to a URL. An unauthenticated, remote attacker can leverage this issue to disclose the source of scripts, which may contain passwords and...

Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability

This host has iTunes installed, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbappleitunesbofvulnjul10.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability

iTunes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

zenPHOTO (Cross Site Scripting in URI) Vulnerability

Exploit for php platform in category web applications ==================================================== zenPHOTO Cross Site Scripting in URI Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Oracle Secure Backup Administration Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. The specific flaw exists within the register globals emulation layer which allows attackers to specify values for arbitrary program variables. When specific parameters are...

Apache Struts Remote Command Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexec msf undefinedcodeexec show actions ...actions... msf undefinedcodeexec set ACTION msf undefinedcodeexec show options ...show and set options... msf undefinedcodeexec run...

Moodle XSS and CSRF Vulnerabilities

Moodle is prone to cross-site ccripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...