8781 matches found
Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' RCE Vulnerability
Microsoft Windows is prone to a remote code execution RCE vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. SPDX-FileCopyrightText: 2009 Greenbone AG Som...
Ipswitch WhatsUp Web Interface SQL Injection (CVE-2005-1250)
WhatsUp Professional 2005 is a network monitoring and resource management solution. WhatsUp Professional uses a relational database to store the information about user accounts and network devices that are monitored by the application. The relational databases supported by WhatsUp Professional ar...
Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)
This host has Microsoft DNS Devolution and is prone to Third-Level Domain Name Resolving Weakness. OpenVAS Vulnerability Test $Id: secpodmsdnsdevolutionresolvingweakness.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness 971888 Authors...
InterSystems Cache UtilConfigHome.csp Argument Buffer Overflow
This module exploits a stack buffer overflow in InterSystems Cache 2009.1. By sending a specially crafted GET request, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/intersystems/cache msf undefinedcache show actions ...actions... msf undefinedcache...
MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit
No description provided by source. / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Dominic Chell [email protected] PoC: http://www.milw0rm.com/exploits/9277 The PoC author said he could not exploit it so I decided to try. A bit of fun for a boring night in Peterborough : Good...
IPSwitch IMAP Server 9.20 Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" includ...
MP3 Studio 1.0 - .m3u Local Buffer Overflow
MP3 Studio 1.0 - .m3u Local Buffer Overflow / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Dominic Chell PoC: http://www.milw0rm.com/exploits/9277 The PoC author said he could not exploit it so I decided to try. A bit of fun for a boring night in Peterborough : Good luck findin...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
No description provided by source. / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell [email protected] Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h"...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits =========================================================== IPSwitch IMAP Server include include include include "winsock2.h" pragma commentlib, "ws232" define usage voidfprintfstderr, "Ipsbitch vs Ipswitch IMAP \n\nExample: ipsbitch.exe ip...
MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== MP3 Studio 1.0 .m3u File Local Buffer Overflow Exploit ======================================================== / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Domini...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
MP3 Studio 1.0 - '.m3u' Local Buffer Overflow
/ mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Dominic Chell PoC: http://www.milw0rm.com/exploits/9277 The PoC author said he could not exploit it so I decided to try. A bit of fun for a boring night in Peterborough : Good luck finding someone who uses this media player. /...
MS09-047: Windows Media Format Multiple Vulnerabilities (Windows 2000)
Binary data 5163.prm...
FTPShell Client 4.1 RC2 Buffer Overflow
!/usr/bin/python | || | / \ | | | | | | | | | - from socket import import os import time win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum http://metasploit.com stage2 = "\x44\x7A\x32\x37\x44\x7A\x32\x37" "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...
Microsoft Security Bulletin MS09-045 - Critical Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961)
Microsoft Security Bulletin MS09-045 - Critical Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution 971961 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the JScript...
Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)
Microsoft Security Bulletin MS09-046 - Critical Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution 956844 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in th...
JVN#62211338 Buffer overflow vulnerability in Microsoft Windows
Windows Media Format Runtime included in Microsoft Windows contains a buffer overflow vulnerability when parsing specific files. Impact If a user opens a specially crafted file, an attacker may execute arbitrary code. Solution Update the software Apply the update according to the information...
Microsoft Windows TCP/IP Orphaned Connection Remote Denial of Service Vulnerability
Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. Technologies Affected Avaya Messaging Application Server Avaya Messaging...
Microsoft DHTML Editing Component ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft DHTML Editing Component ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context...