CVE-2014-2977

Multiple integer signedness errors in the DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow...

CVE-2014-2978

The DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write...

CVE-2014-2977

Multiple integer signedness errors in the DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow...

CVE-2014-2978

The DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write...

Tools Emerge to Detect Carrier IQ App

As the situation involving Carrier IQ continues to evolve and users become more aware of the software and its capabilities, a couple of tools designed to detect the application’s presence on mobile devices have emerged. Mobile-security vendor Lookout has developed an Android app that can detect...

Voodoo Carrier IQ detector application released for Android

Voodoo Carrier IQ detector application released for Android An Android developer recently discovered a clandestine application called Carrier IQ built into most smartphones that doesn't just track your location; it secretly records your keystrokes, and there's nothing you can do about it. A new...

Voodoo Carrier IQ detector application released for Android

Voodoo Carrier IQ detector application released forAndroid An Android developer recently discovered a clandestine application called Carrier IQ built into most smartphones that doesn't just track your location; it secretly records your keystrokes, and there's nothing you can do about it. A new...

Google Cloud Print: Thinking Through the Security, Privacy Implications

Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones. However, there are some privacy and security implications that need to be fleshed out before end users rush ...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it achieves "System" File status.This file can't be deleted, nor renamed or...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

CVE-2007-2651

Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service connection loss or possibly execute arbitrary code via a 1 DNS name response of the exact length as a buffer; or a long 2 channel name, 3 partyline channel name, or unspecified vector...

Code injection

Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service connection loss or possibly execute arbitrary code via a 1 DNS name response of the exact length as a buffer; or a long 2 channel name, 3 partyline channel name, or unspecified vector...

CVE-2007-2651

CVE-2007-2651 affects VooDoo cIRCle prior to 1.1.beta27. Multiple off-by-one errors can allow a remote attacker to cause a denial of service (connection loss) or possibly execute arbitrary code via crafted BOTNET packets, specifically through a DNS name response matching the buffer length or via ...

CVE-2007-2651

Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service connection loss or possibly execute arbitrary code via a 1 DNS name response of the exact length as a buffer; or a long 2 channel name, 3 partyline channel name, or unspecified vector...

CVE-2006-6890

Voodoo chat 1.0RC1b stores passwords under the web root with insufficient access control, enabling remote retrieval of passwords via a direct request to data/users.dat. Affected component: the chat application’s data storage file (data/users.dat) exposed at web root. Root cause: inadequate access...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

Voodoo chat 1.0RC1b Password Disclosure Vulnerability

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

No description provided by source. Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke,...

Voodoo chat 1.0RC1b - users.dat Password Disclosure

Voodoo chat 1.0RC1b - users.dat Password Disclosure Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com...