This exploit allows an attacker to create a buffer overflow in Total Commander 8.52. By executing a specially crafted python script, the attacker can create a file that triggers the buffer overflow when certain actions are performed in Total Commander. This can lead to remote code execution or denial of service.
A Denial of Service can be achieved by concatenating several large strings together and attempting to write to file.
The weakness is caused due to the 'j_spring_security_check' script and how it verifies provided credentials. An attacker can use this weakness to enumerate valid users on the affected node.
This exploit takes advantage of a stack overflow vulnerability in CyberLink LabelPrint <=2.5. The vulnerability allows an attacker to execute arbitrary code by creating a specially crafted project file.
This exploit bypasses Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) using the ASM.JS JIT Spray technique. It targets Firefox version 50.0.1 and exploits a vulnerability (CVE-2016-9079) in the Tor Browser.
The handler of the nt!NtTraceControl system call discloses portions of uninitialized pool memory to user-mode clients on Windows 10 systems. The uninitialized values are copied back to user-mode, which can potentially expose sensitive information.
The exploit allows an attacker to run CMD.EXE with system privileges by manipulating the Cisco AnyConnect application from the logon screen. It also allows running scripts from a USB flash drive.
Internet download accelerator suffers from a BOF when an FTP Download of file with long name fails.
This exploit allows an attacker to derandomize the latest Windows 10 Kernel by getting the PML4-Self-Ref entry.
The NodCMS application is vulnerable to PHP Code Execution. An attacker can exploit this vulnerability by injecting malicious code into the 'config.php' file, which can lead to remote code execution.
Services By CQR