Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 RAS Phonebook Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/266/info Microsoft Windows NT RAS Service contains multiple buffer overflows that allow the execution of arbitrary code resulting in elevated privileges by local users. The RAS Service allows users to dial and connect to...

WFTPD 3.0 'RETR' and 'CWD' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attacker to execute...

Smartwin Technology CyberOffice Shopping Cart 2.0 Price Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modifi...

MP4 Player 4.0 - Local Crash PoC

No description provided by source. !usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file=SarBoT511.m4v; $boom=A x 2000;...

Multiple Web Wiz Products Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27419/info Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this issue to retriev...

Horizon QCMS 4.0 /lib/functions/d-load.php Directory Traversal

No description provided by source...

ISC-DHCPD Denial of Service

No description provided by source. ! /usr/bin/env python Exploit title: isc-dhcpd DoS Date: 03/07/2010 Author: sid Software Link: https://www.isc.org/software/dhcp Version: 4.0.x, 4.1.x, 4.2.x CVE: cve-2010-2156 ps: is possible make a bruteforce on subnet ip address to find a correct value. impor...

jaf cms 4.0 rc2 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22665 Reference: http://www.htbridge.ch/advisory/shellcreatecommandexecutioninjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability Type:...

Netref 4.0 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

Microsoft IIS 4.0,Microsoft JET 3.5/3.5.1 Database Engine VBA Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/286/info Microsoft's JET database engine feature allows the embedding of Visual Basic for Application in SQL string expressions and the lack of metacharacter filtering by many web applications may allow remote users to...

Slaed CMS 4.0 - Multiple Vulnerabilities

No description provided by source...

W-Agora 4.0 - delete_user.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

Microsoft Windows NT 4.0 NT4ALL DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using...

Microsoft NetMeeting 3.0.1 4.4.3385 Remote Desktop Sharing DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to...

DynMedia Pro Web CMS 4.0 - Local File Disclosure

No description provided by source. |||!===========================================================================! DynMedia Pro Web CMS 4.0 ||Local File Disclosure Exploit| | Author : MbahSemar [email protected] Homepage : http://www.indonesianhacker.or.id | http://suramcrew.org |...

Digital UNIX 4.0/4.0 B/4.0 D SUID/SGID Core File Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions are 0600. This...

NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4 Server Operator to Administrator Privilege Escalation: System Key Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/182/info The default ACL over the HKEYLocalMachine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon key System value includes an entry for Server Operators:Special. The Special setting allows Server Ops to Set this...

Windows NT 4.0 - Remote Registry Request Dos Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting...

Microsoft Windows NT 4.0 Recycle Bin Pre-created Folder Vulnerability

No description provided by source. Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: http://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is created in the \Recycler...