The 'BackImage' ,'ScriptName', 'ModelName' and 'SRC' properties can be used to trigger a buffer overflow condition. The crazytalk4.ocx ActiveX control will load the close CrazyTalk4Native.dll library and, while
This exploit takes advantage of a vulnerability in the Typesoft-FTP APPE command. It causes a stack-based buffer overflow by sending a specially crafted buffer to the server. This leads to a denial of service (DoS) condition on the target system.
This module exploits a vulnerability found in NetDecision's HTTP service (located in C:Program FilesNetDecisionBinHttpSvr.exe). By supplying a long string of data to the URL, an overflow may occur if the data gets handled by HTTP Server's active window. In other words, in order to gain remote code execution, the victim is probably looking at HttpSvr's window.
This exploit allows an attacker to change the administrative password remotely in aspWebLinks 2.0 by exploiting a SQL injection vulnerability in the links.asp page.
RivetTracker is a php base torrent tracker with multiple SQL injection vulnerabilities. The vulnerability allows an attacker to access sensitive files, execute arbitrary SQL queries, and potentially retrieve passwords and usernames for admin, user, and mysql database.
The metajour 2.1 script is vulnerable to remote file inclusion attacks. An attacker can include malicious scripts by manipulating the 'system_path' parameter in various PHP files.
A attacker can remotely disable the account from administrator not allowing the same to be able to access the site
WebfolioCMS 1.1.4 (and lower) is affected by a CSRF Vulnerability which allows an attacker to add a new administrator, modify web pages, and change other WebfolioCMS parameters. The exploit demonstrates how to add an administrator account and modify existing and published web pages.
The exploit allows remote attackers to execute arbitrary code via a long SSH username, which triggers a buffer overflow in the username field of the SSH handshake process.
PlumeCMS is prone to a CSRF Vulnerability which allows an attacker to insert and publish "News" (as PlumeCMS names his articles) when an authenticated admin browses a web page containing the provided HTML/Javascript code.
Services By CQR