GateKeeper Pro 4.7 web proxy Remote Buffer Overflow Exploit

No description provided by source. /================CRPT - FrenchTeam ================= Coromputer Security Advisory - CRPTSA-01 =================== Summary ===================== Software : GateKeeper Pro 4.7 Platforms : win32 Risk : High Impact : Buffer overflow Release Date : 2004-02-23...

Novell Client for Windows口令重置本地栈溢出漏洞

BUGTRAQ ID: 29109 CVECAN ID: CVE-2007-5762 Novell Client是允许NetWare连接到Windows的工作站软件。 Novell Client在处理用户名字段时存在栈溢出漏洞，如果用户在登录时提交了超长的用户名就可以触发这个溢出。 目前这个漏洞已经修复，将用户名字段限制为255个字符。但如果在登录时点击了“忘记口令”链接的话，就会弹出一个包含有所提供的用户名的窗口，这仍可触发栈溢出，导致蓝屏死机。 Novell Client http://support.novell.com/security-alerts...

GroupWise 7.0 mailto: scheme buffer overflow

PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the consequence that can overwrite the EIP and is able ...

GroupWise 7 attached bugs

Product: GroupWise 7 OS: Windows xp Find two types of vulnerabilities in this client is a correo.Una xss and the other a denial of service but I am also appears to be run arbitrary code. XSS in web access You can run Javascript code to send an attachment with poorly trained jpg extension. Denial ...

Trillian 3.1 basic nick crash

I found a flaw in the trillian 3.1 for Windows. It is that on receipt of a nickname too long with some characters, this leads to break the program, the failure of the curious is that when the abri with ollydbg tries to read the argument of the message such as whether to wear the nickname long...

Safari 3.1.1 Multiple Vulnerabilities for windows

I found a number of flaws in the browser Safari 3.1.1. The first is a way to make spoofing "falsify direction". Is that as we all know many browser to put eg [email protected] This attempt to connect to the domain after the @ user and use the first word or letters that we have, this is not today becau...

subedit-poc.txt

/===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and | throwing access violation exception on group of...

SubEdit Player build 4066 subtitle Buffer Overflow PoC

No description provided by source. /===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and | throwing access...

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

SubEdit Player build 4066 - subtitle Buffer Overflow PoC /===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and...

SubEdit Player build 4066 subtitle Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== SubEdit Player build 4066 subtitle Buffer Overflow PoC ====================================================== /===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit...

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

/===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and | throwing access violation exception on group of...

Safari 3.1 for windows download bug

This is another flaw I found in the Safari browser for Windows, the fault lies when trying to download a file with a very long name that causes the program is broken and pull the following exception. Access violation when reading11b5c539 If the file is filled with more letters to cause an excepti...

Internet Explorer 7.0 crash

The test was conducted in an updated Internet Explorer 7.0 a day. Creating a document can be malformed probocar a mistake. The flaw in this method createtextrange already known by everyone. On this occasion fails to create an item with an argument followed by a long and while infinity. By opening...

NERO Media Player <= 1.4.0.35b M3U File Buffer Overflow PoC

No description provided by source. NERO Media Player = 1.4.0.35b Remote Buffer Overflow .M3U This exception may be expected and handled. eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38 edi=41414141 eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac pe nc cs=001b...

Access violation and limited informations disclosure in webcamXP 3.72.440.0

Luigi Auriemma Application: webcamXP http://www.webcamxp.com Versions: = 3.72.440.0 = beta 4.05.280 Platforms: Windows Bug: access violation with limited informations disclosure Exploitation: remote Date: 18 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

dBpowerAMP Audio Player Release 2 M3U File Buffer Overflow PoC

No description provided by source. dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000...

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc. -------------- Access Violation at 0x42424242 The code: object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'/object input language=VBScript onclick=Son...

dbpoweramp-dos.txt

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

nero-dos.txt

NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the crash /if not exploited .../ you wont be able to open Nero...