6632 matches found
BulletProof FTP Client 2010 Buffer Overflow
----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Windows XP SP3 CVE: CVE-2014-2973...
BulletProof FTP Client 2010 - Buffer Overflow (SEH) (PoC)
----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Windows XP SP3 CVE: CVE-2014-2973...
DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation
No description provided by source. from shutil import copyfile import sys """ Exploit Title: DjVuLibre = 3.5.25 Out of Bounds Access Violation Date: 07/14/24 Exploit Author: drone @dronesec Vendor: http://djvu.sourceforge.net/ Software link:...
DjVuLibre 3.5.25.3 Out Of Bounds Access Violation
from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 ...
GE Proficy HMI/SCADA CIMPLICITY CimView Memory Access Violation
OVERVIEW This advisory was originally posted to the NCCIC/US-CERT secure Portal library on October 16, 2014, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Said Arfi has identified a memory access violation vulnerability in GE’s CIMPLICITY CimView application. GE has...
Localize: PHP PDOException and Full Path Disclosure
hi phrasekey , agian! in phraseChange action if set to array pdo quote show error! line 755 index.php Warning: PDO::quote expects parameter 1 to be string, array given in /srv/data/web/vhosts/www.localize.im/htdocs/classes/Database.php on line 30 Fatal error: Uncaught exception 'PDOException' wit...
Wireshark 1.10.7 - DoS PoC
No description provided by source. !/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissaatgmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepage:...
Microsoft Organization Chart 2 - Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...
LEADTOOLS 11.5.0.9 - (ltisi11n.ocx) DriverName() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110050-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltisi11n.ocx prototype = Property Let DriverName As String memberName = DriverName...
LEADTOOLS 11.5.0.9 - (ltlst11n.ocx) Insert() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110100-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltlst11n.ocx prototype = Function Insert ByVal Bitmap As Long , ByVal pszText As Stri...
LEADTOOLS 11.5.0.9 (ltdlg11n.ocx) - GetColorRes() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110060-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltdlg11n.ocx prototype = Function GetColorRes ByVal hWnd As Long As Integer memberNam...
LEADTOOLS 11.5.0.9 (lttmb11n.ocx) - BrowseDir() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110200-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\lttmb11n.ocx prototype = Function BrowseDir ByVal pszDirectory As String As Integer...
LEADTOOLS 11.5.0.9 - (ltdlg11n.ocx) Bitmap Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110060-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltdlg11n.ocx prototype = Property Let Bitmap As Long memberName = Bitmap progid =...
PEStudio 3.69 - Denial of Service
No description provided by source. Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Window...
Yahoo! Messenger 5.6 File Transfer Buffer Overrun Vulnerability
No description provided by source. source: Yahoo! Messenger File Transfer Buffer Overrun Vulnerability Yahoo! Messenger is prone to a remotely exploitable buffer overrun vulnerability. An attacker may trigger this condition by initiating a malformed 'sendfile' request, which the victim user must...
TransSoft Broker FTP Server 3.0/4.0/4.7/5.x CWD Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, crea...
VLC Media Player 1.1.11 - (.amr) Denial of Service PoC
No description provided by source. !/usr/bin/perl Exploit Title: VLC media player v1.1.11 .amr Local Crash PoC Date: 04.01.2012 Author: Fabi@habsec [email protected] Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe Version: 1.1.11 Tested on: Windows 7 x86...
Musicqueue 1.2 SIGSEGV Signal Handler Insecure File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedure invokes a library function,...