WinLicense is prone to an unspecified memory corruption vulnerability. An attacker can exploit this issue by tricking a victim into opening a malicious XML file to execute arbitrary code and to cause denial-of-service conditions.
Adobe Photoshop is a graphics editing program developed and published by Adobe Systems Incorporated. Adobe's 2003 'Creative Suite' rebranding led to Adobe Photoshop 8's renaming to Adobe Photoshop CS. Thus, Adobe Photoshop CS5 is the 12th major release of Adobe Photoshop. The CS rebranding also resulted in Adobe offering numerous software packages containing multiple Adobe programs for a reduced price. Adobe Photoshop is released in two editions: Adobe Photoshop, and Adobe Photoshop Extended, with the Extended having extra 3D image creation, motion graphics editing, and advanced image analysis features. Adobe Photoshop Extended is included in all of Adobe's Creative Suite offerings except Design Standard, which includes the Adobe Photoshop edition. Alongside Photoshop and Photoshop Extended, Adobe also publishes Photoshop Elements and Photoshop Lightroom, collectively called 'The Adobe Photoshop Family'. In 2008, Adobe released Adobe Photoshop Express, a free web-based image editing tool to edit photos directly on blogs and social networking sites; in 2011 a version was released for the Android operating system and the iOS operating system. Adobe only supports Windows and Macintosh versions of Photoshop, but using Wine, Photoshop CS5 can run well on Linux.
By creating a rule in No-Redirect Add-on: ^http://example.com/path/ and accessing http://example.com/path/admin.php, the redirection mechanism can be bypassed easily.
A SQL injection vulnerability exists in OneForum, which allows an attacker to execute arbitrary SQL commands on the underlying database. This can be exploited to gain access to sensitive information, modify data, or even execute arbitrary code on the server.
FTPServer is vulnerable to a DoS condition when long file names are repeatedly attempted to be written via the STOR command. Successful exploitation will causes devices to restart.
This exploit is a buffer overflow vulnerability in Tiny Server <=1.1.9 (HTTP) HEAD request. It is written in Python and is used to crash the target host by sending a crash buffer.
This exploit is a proof of concept for a remote crash vulnerability in PeerFTP Server version 4.01 and below. The exploit sends a malicious payload of 1000 X characters to the server, which causes the server to crash.
DeviceExpert is a web–based, multi vendor network change, configuration and compliance management (NCCCM) solution for switches, routers, firewalls and other network devices. Without prior authentication, it is possible to invoke the ScheduleResultViewer servlet to disclose every file on target system. This can be done through the FileName argument which suffers of a directory traversal vulnerability. auth-conf.xml stores the authentication credentials to the administrative interface (username, hashed password and a salt). It is also possible to backup the MySQL database tables by cycling through subfolders.
The mentioned product creates various virtual directories on IIS. Among them the 'WSVulnerabilityCore' one. Without prior authentication / authorization is possible to invoke the 'VulCore.asmx' web service which exposes various functions inside the underlying dlls. By specifying the 'SetTaskLogByFile' operation is possible to delete arbitrary files on the target operating system. The 'filename' argument is used to delete files and suffers of a directory traversal vulnerability, no checks of any kind. To the ManagementSuite foler is possible to write files, so it is possible to delete any file on the target system.
By specifying the 'RunAMTCommand' operation is possible to create arbitrary files inside public virtual directories. This operation supports five arguments: when the 'Command' argument is set ex. to '-PutUpdateFileCore', 'Data2' and 'Data3' are used for file creation. The first one suffers of a directory traversal vulnerability. You are in control of the path, extension and content of the newly created file. Then you can execute arbitrary code by invoking this file.
Services By CQR