Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

No description provided by source. $Id: ultraofficehttpupload.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

SAP SAPLPD 6.28 Buffer Overflow

No description provided by source. $Id: saplpd.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Persits XUpload ActiveX AddFile Buffer Overflow

No description provided by source. $Id: hploadrunneraddfile.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Cisco IOS 12.3(18) FTP Server - Remote Exploit (attached to gdb)

No description provided by source. / Cisco IOS FTP server remote exploit by Andy Davis 2008 Cisco Advisory ID: cisco-sa-20070509-iosftp - May 2007 Specific hard-coded addresses for IOS 12.318 on a 2621XM router Removes the requirement to authenticate and escalates to level 15 To protect the...

Net-SNMP <= 5.1.4/5.2.4/5.4.1 Perl Module Buffer Overflow PoC

No description provided by source. !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large OCTETSTRING in a...

Sun Java Calendar Deserialization Exploit

No description provided by source. $Id: javacalendardeserialize.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft Windows Vista/Server 2008 "nsiproxy.sys" Local Kernel DoS Exploit

No description provided by source. !/usr/bin/python Title: Microsoft Windows Vista/Server 2008 nsiproxy.sys Local Kernel DoS Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.microsoft.com Vulnerable: Windows Vista/Server 2008 from ctypes import kernel32 = windll.kernel32 Psapi =...

CUPS <= 1.3.7 'HP-GL/2' Filter Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Faile...

Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS (Poc)

No description provided by source. !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 20...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

No description provided by source. $Id: caarcserve342.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Microsoft Windows XP/VISTA/2003/2008 - WMI Service Isolation Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...

ImperialBB <= 2.3.5 - Remote File Upload Exploit

No description provided by source. Title : ImperialBB = 2.3.5 Remote File Upload Vulnerability Date : 5th July 2008 Found by : PHPLizardo - http://phplizardo.2gb.fr Greetz : Gu1ll4um3r0m41n Howto : 1. Go to your User Control Panel 2. Upload any file you want 3. Tamper the request and change the...

Linux Kernel < 2.6.26.4 - SCTP Kernel Memory Disclosure Exploit

No description provided by source. / cve-2008-4113.c Linux Kernel 2.6.26.4 SCTP kernel memory disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in t...

Apache Geronimo <= 2.1.3 - Multiple Directory Traversal Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor...

Xtacacsd <= 4.1.2 - report Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

DESlock+ <= 3.2.7 - Local Kernel Overflow PoC

No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...

Borland CaliberRM StarTeam Multicast Service Buffer Overflow

No description provided by source. $Id: borlandstarteam.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action ite...

phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection

No description provided by source. $Id: phpscheduleitstartdate.rb 14073 2011-10-26 18:06:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...