1182 matches found
Sql injection
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...
CVE-2013-3577
Affected product/area: Wave EMBASSY Remote Administration Server (ERAS) – Help Desk application. Vulnerability: CVE-2013-3577 is a SQL injection flaw that allows a remote attacker to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue (the search field). Root cause: In...
CVE-2013-3578
The CVE-2013-3578 issue affects Wave EMBASSY ERAS Help Desk (part of ERAS) where input in the ct100$4MainController$TextBoxSearchValue parameter enables SQL injection and, in some cases, command execution on the server. Affected products are ERAS 2.8.4 Help Desk and ERAS 2.9.5 Help Desk; exploita...
CVE-2013-3577
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...
CVE-2013-3578
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...
Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)
Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors...
DEBIAN-CVE-2011-2911
Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...
Integer overflow in foobar2000 1.1.7
Luigi Auriemma Application: foobar2000 http://www.foobar2000.org Versions: = 1.1.7 Platforms: Windows Bug: integer overflow Date: 03 Jul 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1 Introduction ===============...
Verizon: RSA Hackers Using Trojans, Keyloggers In Second Wave Attacks
Customers of EMC’s RSA Security division that are worried about being the victim of an attack following the theft of sensitive data relating to that company’s SECURID tokens may not need to rush out and replace those tokens, according to security consulting firm Verizon Business. Efforts to stop...
Samsung Handsets Distributed With Malware-Infected Memory Cards
Another mobile-phone manufacturer has fallen victim to an increasingly common attack in which phones’ memory cards are infected with malware during the manufacturing process and then shipped out to customers. The latest victim is Samsung, which has acknowledged that the microSD cards in a batch o...
GOM Player v2.1.21.4846 (.wav) Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc ====================================================== GOM Player v2.1.21.4846 .wav Buffer Overflow Exploit ====================================================== !/usr/bin/perl GOM Player 2.1.21.4846 .wav Buffer Overflow Exploit Homepage:...
KOL Wave Player 1.0 Local Buffer Overflow
!/usr/bin/perl Usage--file created--load file--b00m.wav BOOM print "\n"; print "! KOL Wave Player 1.0 .wav Local Buffer Overflow PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "http://"."\x41" x 1337; my $filename = "b00m.wav"; ope...
KOL Wave Player 1.0 - .wav Local Buffer Overflow (PoC)
KOL Wave Player 1.0 - .wav Local Buffer Overflow PoC !/usr/bin/perl Usage--file created--load file--b00m.wav BOOM print "\n"; print "! KOL Wave Player 1.0 .wav Local Buffer Overflow PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom =...
KOL Wave Player 1.0 (.wav) Local Buffer Overflow PoC
Exploit for unknown platform in category local exploits ==================================================== KOL Wave Player 1.0 .wav Local Buffer Overflow PoC ==================================================== !/usr/bin/perl Usage--file created--load file--b00m.wav BOOM print "\n"; print "! KO...
KOL Wave Player 1.0 - '.wav' Local Buffer Overflow (PoC)
!/usr/bin/perl Usage--file created--load file--b00m.wav BOOM print "\n"; print "! KOL Wave Player 1.0 .wav Local Buffer Overflow PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "http://"."\x41" x 1337; my $filename = "b00m.wav"; ope...
DEBIAN-CVE-2008-5824
Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WAV file...
DEBIAN-CVE-2008-2430
Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...
DEBIAN-CVE-2007-3467
Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...
DEBIAN-CVE-2007-3468
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...