8799 matches found
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
Exploit for unknown platform in category remote exploits ================================================================== Winamp = 5.12 Crafted PLS Remote Buffer Overflow Exploit perl ================================================================== !/usr/bin/perl -w...
Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)
!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass
?php // PHP = 4.4.6 mssqlconnect & mssqlpconnect local buffer overflow // poc exploit and safemode bypass // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org // u can easily adjust for php5 // this as my little contribute to MOPB $scode= "xebx1b". "x5b"...
[Reversemode Advisory] Apple Quicktime Color ID remote heap corruption
APPLE QUICKTIME COLOR TABLE ID REMOTE HEAP CORRUPTION Rubйn Santamarta [email protected] Affected products and/or platforms: Mac OS X v10.3.9 and later Windows Vista Windows XP Windows 2000 Color table ID A 16-bit integer that identifies which color table to use. If this field is set to –1, t...
Microsoft Windows - .doc Malformed Pointers Denial of Service
Microsoft Windows - .doc Malformed Pointers Denial of Service /\ Microsoft Windows .doc File Malformed Pointers DoS Just move your mouse on the file and explorer crashes. If it does not try to look at file properties. Bug comes from Ole32.dll: CMP DWORD PTR DS:EAX+EBX,3 and we can set EAX, EDX an...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================= PHP 0day.today 2018-03-31...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
No description provided by source. ?php // PHP = 4.4.6 mssqlconnect & mssqlpconnect local buffer overflow // poc exploit and safemode bypass // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org // u can easily adjust for php5 // this as my little contribute to...
PHP 4.4.6 - mssql_[p]connect() Local Buffer Overflow
PHP 4.4.6 - mssqlpconnect Local Buffer Overflow milw0rm.com 2007-03-05...
Windows 图像捕获服务中的漏洞可能允许特权提升(MS07-007)
在 Windows XP Service Pack 2 内，Window 图像捕获启动应用程序的方式中存在一个特权提升漏洞。 已登录的用户可通过利用此漏洞完全控制系统。 Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 和 Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003（用于基于 Itanium 的系统）和...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected]...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service = 2.0.1 Long Transporting Mode Overflow Perl Exploit By Umesh Wanve [email protected]...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode (Perl)
3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Perl !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$A...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Exploit (perl)
Exploit for unknown platform in category remote exploits ================================================================== 3Com TFTP Service = 2.0.1 Long Transporting Mode Exploit perl ================================================================== !/usr/bin/perl -w...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode
!/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 on port $A...
News Rover 12.1 Rev 1 - Stack Overflow (2)
News Rover 12.1 Rev 1 - Stack Overflow 2 !/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected]...
News Rover 12.1 Rev 1 - Stack Overflow (2)
!/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected] ==============================================================================================...
Sql injection
SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1023
SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1023
The CVE-2007-1023 entry concerns Snitz Forums 2000, version 3.1 SR4, where pop_profile.asp is vulnerable to SQL injection via the id parameter. This allows remote attackers to execute arbitrary SQL commands. The provided documents do not include explicit remediation steps or patched versions. No ...