CVE-2011-2750: Undefined Security Weakness

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

SAP Player 0.9 Buffer Overflow

SAP Player 0.9 .m3u universal Diret ret version Author Abhishek Sahni - abhil00703atgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.sorinara.com/sap/sap09.exe Vulnerable versio...

PT-2011-3427

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20 Description The issue is related to a buffer overflow in the omniinet.exe component of the inet service, which allows remote attackers to execute arbitrary code through a crafted...

Windows Executable Download and Evaluate VBS

Downloads a file from an HTTPS URL and executes it as a vbs script. Use it to stage a vbs encoded payload from a short command line. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize =...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

Nmap NSE net: domcon-cmd

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CMD CMS 1.4 SQL Injection

Exploit Title : CMD CMS v1.4 SQL Injection Vulnerability Author : ThunDEr HeaD Contact : [email protected] Date : 21-02-2011 HomePage : www.indishell.in Version : 1.4 , 2.0 Tested on : Balianti, Inc. Vulnerability Style : CMD CMS Sql Injection Vunerability...

PT-2011-2766

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of EXEC CMD arguments by the client in HP Data Protector. This allows remote attackers to execute arbitrary Perl code via a crafted...

PT-2011-2767

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue concerns the client in HP Data Protector, which fails to verify the contents of files associated with the EXEC CMD command. This allows remote attackers to execute arbitra...

AOL 9.5 - .rtx Local Buffer Overflow

AOL 9.5 - .rtx Local Buffer Overflow !/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: h1ch4m@live....

zblog1. 8 latest cross-site XSS vulnerability and repair method-vulnerability warning-the black bar safety net

Publishing author: Clouder Affected versions: zblog 1.8 Official website: http://www.rainbowsoft.org/ Vulnerability type: path Station Vulnerability file: cmd. asp Vulnerability address: http://blog.rainbowsoft.org/cmd.asp?act=gettburl&id=1 0"iframe%20src=http://www. waitalone. cn%2 0/iframe Brie...

Sogou input method 0DAY-vulnerability warning-the black bar safety net

Vulnerability process description: When windows is loaded sogou input method later, log in to the system, lock the computercltr+alt+del it. Switch to sogou input method, input the phonetic alphabet appears sogou input method toolbar, click on search, it will call iexplorer.exe the. Next you can b...

J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow

J-Integra 2.11 - ActiveX SetIdentity Buffer Overflow //payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Free CD to MP3 Converter 3.1 - Local Buffer Overflow (SEH)

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

MetInfo 2.0 PHP代码注入漏洞

MetInfo企业网站管理系统是一个功能完善的营销型企业网站管理平台，PHP+MYSQL架构 MetInfo 2.0的/include/common.inc.php文件第132行： evalbase64decode$class2all10; $class2all10变量未初始化，因此我们可以控制其值，进行代码注入的利用。 MetInfo 2.0 SEBUG临时解决方法： 对$class2all10变量进行初始化 厂商补丁： metinfo ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.metinfo.cn...

DJ Studio Pro 8.1.3.2.1 SEH Overwrite

DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/DJSP.htm Vulnerable version DJ Studio...

Audiotran 1.4.2.4 SEH Overflow Exploit

Exploit for windows platform in category local exploits ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web -...

Windows Execute net user /ADD CMD

Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars 1 UPPER, 1 lower, 1 digit/special This...