c0ntex

CVE-2008-0729 EXPLOITDB html WORKING POC

Mobile Safari 1.1.2-1.1.3 - Denial of Service via JavaScript String and Array Manipulation

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.

View Code

CVE-2006-6410 EXPLOITDB html WORKING POC

VMware Workstation - Buffer Overflow via ActiveX Control Initialize Function

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function.

View Code

CVE-2008-1765 EXPLOITDB text WORKING POC

Adobe Photoshop Album Starter Edition 3.2 - Buffer Overflow

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244.

View Code

CVE-2005-4076 EXPLOITDB c WORKING POC

Appfluent Technology Database IDS 2.0 - Local Buffer Overflow via APPFLUENT_HOME Environment Variable

Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable.

View Code

EIP-2026-114720 EXPLOITDB c WORKING POC

Solaris (SPARC/x86) - Local Socket Hijack

View Code

EIP-2026-103151 EXPLOITDB text WORKING POC

Kerberos 1.5.1 - Kadmind Buffer Overflow

View Code

CVE-2005-2665 EXPLOITDB c WORKING POC

Elm 2.5 PL5-PL7 - Remote Code Execution via Expires Header Buffer Overflow

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

View Code

EIP-2026-103107 EXPLOITDB c WORKING POC

Exceed 5.0/6.0/6.1/7.1/8.0 - Font Name Handler Buffer Overflow

View Code

CVE-2004-0659 EXPLOITDB c WORKING POC

MPlayer 1.0pre4 - Buffer Overflow in TranslateFilename

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

View Code

CVE-2005-2710 EXPLOITDB c WORKING POC

Real HelixPlayer & RealPlayer 10 - RCE

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.

View Code

CVE-2004-1475 EXPLOITDB c WORKING POC

xine-lib 1-rc2-1-rc5 - Stack-Based Buffer Overflow via Long VideoCD MRL or Subtitle Lines

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.

View Code

EIP-2026-102888 EXPLOITDB bash WORKING POC

Lantronix Secure Console Server SCS820/SCS1620 - Multiple Local Vulnerabilities

View Code

EIP-2026-102941 EXPLOITDB c WORKING POC

Oracle Database Server 9.0.x - Oracle Binary Local Buffer Overflow

View Code

CVE-2002-1155 EXPLOITDB c WORKING POC

KON kon2 <0.3.9b - Remote Code Execution

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

View Code

CVE-2011-2702 EXPLOITDB text WRITEUP

glibc < 2.13 and eglibc < 2.13 - Remote Code Execution via SSSE3 Optimization

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function.

View Code

EIP-2026-102766 EXPLOITDB text WORKING POC

Xine-Lib 0.99 - Remote Buffer Overflow

View Code

EIP-2026-102504 EXPLOITDB text WRITEUP

McAfee IntruShield Security Management System - Multiple Vulnerabilities

View Code

EIP-2026-100794 EXPLOITDB perl WORKING POC

eRoom 6.0 PlugIn - Insecure File Download Handling

View Code