Foxmail 5.0 PunyLib.dll Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== Foxmail 5.0 PunyLib.dll Remote Stack Overflow Exploit ===================================================== / fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow explo...

Immunity Canvas: NAIMAS32

Name| naimas32 ---|--- CVE| CVE-2004-0095 Exploit Pack| CANVAS Description| Naimas32 Notes| CVE Name: CVE-2004-0095 VENDOR: McAfee CVE Url: https://vulners.com/cve/CVE-2004-0095 CVSS: 5.0...

CVE-2003-1426

Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...

CVE-2003-1260

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command...

CVE-2003-1425

guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter...

KLA10130 ACE vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server response. Original advisories - Related products CuteFTP-5-XP CVE list CVE-2003-1260 high...

Divine Content Server 5.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/8763/info It has been reported that Divine Content Server is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the 'pagename' attribute in the error page of the software. This issu...

CVE-2003-0801

CVE-2003-0801 – Nokia Electronic Documentation (NED) 5.0 suffers a cross-site scripting (XSS) vulnerability. A remote attacker can cause the application to execute arbitrary web script and steal cookies via a crafted URL to the docs/ directory containing the script. Public references indicate an ...

CVE-2003-0802

Summary (CVE-2003-0802): Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root and the NED server’s physical path by sending a "retrieve" action with a location parameter of ".". The connected documents reiterate the same descripti...

CVE-2003-0347

Vulnerability CVE-2003-0347 affects Microsoft Visual Basic for Applications (VBA) 5.0–6.3 via heap-based overflow in VBE.DLL and VBE6.DLL. An attacker could supply a document with a long ID parameter to cause remote code execution. Impact is remote compromise with user privileges; affected compon...

Immunity Canvas: MS03_022

Name| ms03022 ---|--- CVE| CVE-2003-0349 Exploit Pack| CANVAS Description| IIS 5.0 Windows Media Services ISAPI nsisslog.dll Overflow Notes| CVE Name: CVE-2003-0349 VENDOR: Microsoft MSADV: MS03-022 VersionsAffected: Repeatability: Repeatable References:...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

Microsoft IIS 5.0 - WebDAV Remote Code Execution 3 xwdav / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

/ IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9 define LOADLIBRARYA 0x0100107c define GETPROCADDRESS...

GNU Chess 5.0 - Local Buffer Overflow

GNU Chess 5.0 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some...

CVE-2003-0349

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services nsiislog.dll, as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll...

CVE-2003-0469

Buffer overflow in the HTML Converter HTML32.cnv on various Windows operating systems allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag...

CVE-2003-0469

CVE-2003-0469 describes a buffer-overflow in the HTML Converter (html32.cnv) used by Windows applications (via IE and other components). The flaw can be triggered during a cut‑and‑paste operation with a crafted HR tag (align attribute), potentially allowing remote code execution with the privileg...

Internet Explorer >=5.0 : Buffer overflow

script wnd=open"about:blank","",""; wnd.moveToscreen.Width,screen.Height; WndDoc=wnd.document; WndDoc.open; WndDoc.clear; buffer=""; fori=1;i=127;i++buffer+="X"; buffer+="DigitalScream"; WndDoc.write"HR align='"+buffer+"'"; WndDoc.execCommand"SelectAll"; WndDoc.execCommand"Copy"; wnd.close; /scri...

MS Windows IIS 5.0 - 5.1 Remote Denial of Service Exploit

漏洞描述： Microsoft IIS 5.0Internet Infomation Server 5是Microsoft Windows 2000自带的一个网络信息服务器，其中包含HTTP服务功能。IIS5 默认提供了对WebDAV的支持，通过WebDAV可以通过HTTP向用户提供远程文件存储的服务。 WebDAV实现对部分模式的超长请求处理不正确，远程攻击者可以利用这个漏洞对IIS服务进行拒绝服务攻击。 攻击者可以使用'PROPFIND'或'SEARCH'请求方法，提交包含49，153字节的Webdav请求，IIS会由于拒绝服务而重新启动。不过IIS...

CVE-2003-0224

CVE-2003-0224 describes a buffer overflow in IIS 5.0 (ssinc.dll) triggered by a Server Side Include directive with an overly long filename, potentially allowing local users to execute arbitrary code. Affected IIS versions mentioned in connected materials include IIS 4.0, 5.0, and 5.1; exploitatio...