AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Summary AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks. Description The program suffers from a buffer overflow vulnerability when openinng autorun file .ini, as a result of adding extra bytes to parts of the edited file, giving...

iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Memory Corruption Vulnerability

iDefense Security Advisory 02.08.11 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 08, 2011 I. BACKGROUND Adobe Flash Player is an application for viewing animations and movies using computer programs such as a Web browser; in common usage, Flash lets you put animation and movies on a...

RealNetworks RealPlayer Multiple Vulnerabilities (Linux) - Dec 10

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnlindec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Linux- Dec 10 Authors: Sooraj KS Copyright: Copyright c 2010...

Alt-N WebAdmin Source Code Disclosure

Vulnerable: v3.3.3 Vendor: www.altn.com Category: Environment Error Vulnerable ======== Alt-N WebAdmin 3.3.3 U-Mail for Windows V9.8 U-Mail GateWay for Windows V9.8 Details: ========= A source code disclosure vulnerability exists with Alt-N WebAdmin Server. Remote attacker can be exploited to...

PT-2010-5486 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about...

CVE-2010-3170

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43213/info Mechanical Bunny Media PaysiteReviewCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)

Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow SEH BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP...

Joomla! Component com_ybggal 1.0 - 'catid' SQL Injection

----------------------------------------------------------------------- Joomla Component comybggal 1.0 catid SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : June, 22-2010 Location :...

flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service NULL pointer dereference and browser crash by returning a different response when an HTTP request is sent a second time, as demonstrated by two...

[MajorSecurity SA-071]phpFaber CMS - Multiple stored Cross-site Scripting issues

MajorSecurity SA-071phpFaber CMS - Multiple stored Cross-site Scripting issues Details ============= Product: phpFaber CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.phpfaber.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

JVN#82749282 CapsSuite Small Edition PatchMeister vulnerable to denial of service

CapsSuite Small Edition PatchMeister is a product that manages the application of security patches. CapsSuite Small Edition PatchMeister contains a denial of service DoS vulnerability. Impact On a server or workstation with "Client Service for PTM" installed, a remote attacker may shut down or...

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38252/info Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied dat...

Netflow Looping Denial Of Service

Automated Looping Problem on NetFlow Analyzer 7 professional Plus code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Company AKSIT Services Vulnerable Software:ManageEngine NetFlow Analyzer 7 professional Plus Date:19-Nov-2009 Tested on Window os Browser Mozilla/IE8 About...

Serenity/Mplay Audio Player Code Execution Vulnerability

Serenity/Mplay Audio Player is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera 10.01 Remote Array Overrun

No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/223 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689...

Opera 10.01 - Remote Array Overrun

Opera 10.01 - Remote Array Overrun From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/223 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689...

Engeman 6.x.x SQL Injection

Exploit for unknown platform in category web applications =========================== Engeman 6.x.x SQL Injection =========================== Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql...

Joomla! Component com_djcatalog - SQL Injection Blind SQL Injection

Joomla! Component comdjcatalog - SQL Injection Blind SQL Injection ----------------------------------------------------------------------------------------- joomla comdjcatalog component SQL/bsql Injection Multiple Vulnerability...

Mambo Zoom Blind SQL Injection

Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0 ------------------------------------------------------------------- SQLi :...