Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC

No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...

Logitech VideoCall ActiveX Control Buffer Overflow

No description provided by source. $Id: logitechvideocallstart.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

MyBulletinBoard (MyBB) <= 1.2.5 calendar.php Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n; print Bug found and Exploit coded by 0x86 \n; print \n; print www.geeksec.net \n; print 0x86 at geeksec.net \n; prin...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

No description provided by source. $Id: xitamiifmodsince.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Microsoft SharePoint Server 2007 XSS Vulnerability

No description provided by source. Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html http://www.microsoft.com/technet/security/advisory/983438.mspx Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Versio...

Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability

No description provided by source. !-- Mozilla Firefox 'location.hostname' Cross-Domain Vulnerability Software : Mozilla Firefox version 2.0.0.1 and prior CVE reference : CVE-2007-0981 Impact : Security Bypass Risk : Moderate Discovered by : Michal Zalewski http://lcamtuf.coredump.cx/ Advisory Da...

EFS Easy Chat Server - (CSRF) Change Admin Pass Vulnerability

HTML !-- EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Version: 2.2 Date: Jan 11, 2007 Size:1519KB Download Easy Chat Server http://www.echatserver.com/ecssetup.exe By Mountassif Moad -- HEAD TITLEEFS Easy Chat Server XSRF Change Admin Pass Vulnerability/TITLE SCRIPT LANGUAGE=JavaScri...

Solaris 10, 11 Telnet - Remote Authentication Bypass

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Apple iChat 3.1.6 441 - aim:// URL Handler Format String Exploit PoC

No description provided by source. !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.1//EN http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd html head titleMOAB-20-01-2007/title script function boom var str = ''; for var i = 0; i 20; i++ str = str + escape'A%n'; str = 'aim:gochat?roomname=' + str;...

Microsoft Office PowerPoint 2007 DLL Hijacking Exploit (rpawinet.dll)

No description provided by source. / Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o...

ACDSee XPM File Section Buffer Overflow

No description provided by source. $Id: acdseexpm.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Borland InterBase 2007 - ibserver.exe Buffer Overflow PoC

No description provided by source. POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua alau at 163.com use IO::Socket; use strict; my $host=$ARGV0; sub usage print usage: perl poc.pl serverip\n; if $ARGV 0 usage; exit; my $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad...

Microsoft Message Queueing Service DNS Name Path Overflow

No description provided by source. $Id: ms07065msmq.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Macrovision InstallShield Update Service Buffer Overflow

No description provided by source. $Id: macrovisiondownloadandexecute.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Samba 3.0.21-3.0.24 - LSA trans names Heap Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

No description provided by source. $Id: oracledcsubmittoexpress.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

NCTAudioFile2 2.x - ActiveX Control SetFormatLikeSample() Buffer Overflow

No description provided by source. $Id: nctaudiofile2setformatlikesample.rb 9668 2010-07-03 01:38:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

MultiCart 1.0 - Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

HP Tru64 - Remote Secure Shell User Enumeration Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; Remember: you need to accept ssh key first! use Tie::File; use Fcntl 'ORDONLY'; use Expect; use Time::HiRes qwgettimeofday; tru64-sshenum.pl HP Tru64 Remote Secure Shell user enumeration exploit CVE-2007-2791. Author:...

SerWeb <= 2.0.0 dev1 2007-02-20 - Multiple RFI / LFI Vulnerabilities

No description provided by source. SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell...