3952 matches found
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion EternalMart Guestbook 1.1.0 emgbadminpath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +admin/auth.php? +code : + + include"$emgbadminpath/authfunc.php"; + + download link :...
Microsoft Word / Open Office 0-day security vulnerability
2 different unknown vulnerabilities are used for hidden malware installation...
fport. vbs for XP/2 0 0 3-vulnerability warning-the black bar safety net
XP/2 0 0 3 the netstat with the"-o"option, so it is easy to use script to achieve fport features. with new regexp . pattern="..P\s+\S+\s+\S+\s+A-Z\s0-9+" . global=true set ms=. executecreateobject"wscript. shell". exec"netstat-ano". stdout. readall end with for each ps in getobject"winmgmts:\\....
AtomixMP3 <= 2.3 Malformed M3U Buffer Overflow Exploit
No description provided by source. / ======================================================================== 0-day AtomixMP3 = v2.3 Malformed M3U Buffer Overflow PoC ======================================================================== AtomixMP3 Player/Mixer fails to properly handle large fil...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
Quintessential Player <= 4.50.1.82 (Playlist) Denial of Service PoC
No description provided by source. / 0-day Quintessential Player = 4.50.1.82 Playlist Denial Of Service PoC ======================================================================== ======================================================================== Quintessential Player 4.50.1.82 and lower...
XMPlay Playlist文件缓冲区溢出漏洞
XMPlay是一款媒体播放程序。 XMPlay不正确处理播放文件数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题是在处理播放文件中的M3U中的DisplayName字段或FileName字段时缺少正确的边界条件检查，可造成以应用程序权限执行任意指令。 XMPlayer XMPlayer 3.3 4 http://www.un4seen.com/xmplay.html 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit /...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= XMPlay 3.3.0.4 PLS Local/Remote Buffer Overflow Exploit ========================================================= / ==================================================================...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...
XMPlay 3.3.0.4 - .ASX Filename Local Buffer Overflow
XMPlay 3.3.0.4 - .ASX Filename Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-bas...
XMPlay 3.3.0.4 - '.ASX' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed .ASX files...
XMPlay 3.3.0.4 - .PLS Local Buffer Overflow
XMPlay 3.3.0.4 - .PLS Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer...
XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U files...
Easy File Sharing Web Server 4 Remote Information Stealer Exploit
No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...
BSDi suidperl Local Stack Buffer Overflow Exploit
No description provided by source. / BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0. / define...
UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit
No description provided by source. / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don't really care...
RevilloC MailServer 1.x (RCPT TO) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================== RevilloC MailServer 1.x RCPT TO Remote Denial of Service Exploit ================================================================== /...
QK SMTP远程栈溢出漏洞
QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...
OpenBSD 2.6 / 2.7ftpd Remote Exploit
No description provided by source. / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of the time ; Things to add: - automatic writeable directory finding - syn-scan option to do mass-scanning - worm capabilities? shoul...
linux/x86 setuid/portbind shellcode 96 bytes
No description provided by source. / $Id: portbind-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ portbind-linux.c - setuid/portbind shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Simple portbind shellcode that bind's a setuid0 shell on port 31337/tcp based on...