Microsoft Windows Components Remote Code Execution Vulnerabilities (2570947)

This host is missing an important security update according to Microsoft Bulletin MS11-071. OpenVAS Vulnerability Test $Id: secpodms11-071.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Components Remote Code Execution Vulnerabilities 2570947 Authors: Veerendra GG Copyright: Copyright c...

Firefox sensor.dll Insecure Library Loading

Added: 09/13/2011 CVE: CVE-2011-2980 BID: 49217 OSVDB: 74583 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A library loading vulnerability in Mozilla Firefox and Thunderbird allows arbitrary command execution when a user...

Wav Player 1.1.3.6 - '.pll' Local Buffer Overflow

Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow Date: 12/09/2011 Author: Ivan Garcia Ferreira Version: 1.1.3.6 Tested on: Windows 7 SP1 x86 Spanish Description: Wav player can not handle properly large playlists more than 1G. Reproduce: Open the wav player, make a playlist and save it. The...

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...

WAV Player 1.1.36 Buffer Overflow

Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow Date: 12/09/2011 Author: Ivan Garcia Ferreira Version: 1.1.3.6 Tested on: Windows 7 SP1 x86 Spanish Description: Wav player can not handle properly large playlists more than 1G. Reproduce: Open the wav player, make a playlist and save it. The...

Wav Player 1.1.3.6 - .pll Local Buffer Overflow

Wav Player 1.1.3.6 - .pll Local Buffer Overflow Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow Date: 12/09/2011 Author: Ivan Garcia Ferreira Version: 1.1.3.6 Tested on: Windows 7 SP1 x86 Spanish Description: Wav player can not handle properly large playlists more than 1G. Reproduce: Open...

Aika 0.2 Buffer Overflow

/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow

/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...

Aika 0.2 colladaconverter Xml Parsing Buffer Overflow

Exploit for windows platform in category local exploits / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...

Wav Player 1.1.3.6 .pll Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow Date: 12/09/2011 Author: Ivan Garcia Ferreira Version: 1.1.3.6 Tested on: Windows 7 SP1 x86 Spanish Description: Wav player can not handle properly large playlists more than 1G. Reproduc...

Fraudulent Digital Certificates Spoofing Vulnerability (2607712)

The host is installed with Microsoft Windows operating system and is prone to spoofing vulnerability. This NVT has been superseded by KB2641690 Which is addressed in NVT gbmsfraudulentdigitalcertspoofingvuln.nasl OID:1.3.6.1.4.1.25623.1.0.802403. OpenVAS Vulnerability Test $Id:...

In-Link SQL Directory Engine SQL Injection

Exploit Title: In-link SQL Directory Engine ALL VERSIONS SQL INJECTION Vulnerabilities Google Dork: intext:In-link SQL Directory Date: 08/09/2011 Author: http://www.in-portal.com/ Software Link: http://www.in-portal.com/modules/directory-management.html Version: ALL Versions Tested on: Windows 7 ...

MS KB2616676: Fraudulent Digital Certificates Could Allow Spoofing (deprecated)

Due to the issuance of several fraudulent SSL certificates, the root certificates from the certificate authority DigiNotar have been placed in the Microsoft Untrusted Certificate Store. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include'compat.inc'; if description...

Crush FTP 5 - 'APPE' Remote JVM Blue Screen of Death (PoC)

Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python import socket host = rawinput"Type...

Crush FTP 5 Blue Screen Of Death

Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python import socket host = rawinput"Type...

Crush FTP 5 - APPE Remote JVM Blue Screen of Death (PoC)

Crush FTP 5 - APPE Remote JVM Blue Screen of Death PoC Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip...

Crush FTP 5 'APPE' command Remote JVM BSOD PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: email protected Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env...

eSignal and eSignal Pro File Parsing Buffer Overflow in QUO

The software is unable to handle the "" files even those original included in the program like those with the registered extensions QUO, SUM and POR. Successful exploitation of this vulnerability may take up to several seconds due to the use of egghunter. Also, DEP bypass is unlikely due to the...

World Of Warcraft - 'chat-cache.txt' Local Stack Overflow Denial of Service

!/usr/bin/perl Exploit Title: World Of Warcraft Local Stack Overflow Dos Exploit chat-cache.txt Date: 04/09/2011 Author: BSOD Digital Fabien DROMAS Other details:"Code Exec" Exploit in analysis. Tests: OS: Windows 7 Versions: burning crusade,cataclism, Demo Version. Path: world of warcraft WTF...

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption

TOWeb 3.0 - Local Format String Denial of Service TOWeb.MO File Corruption Exploit Title: TOWeb V3 Local Format String DOS Exploit TOWeb.MO file corruption Date: 05/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: V3.17 Path: Lauyan\TOWeb...