JRE/JDK/WINAMP/ICQ/MediaPlayer sound schema files download

ICQ sound schemas are downloaded without user's intervation. It allows to upload file to known location...

lha buffer overflows and path traversal issues

Ulf Härnhammar discovered several vulnerabilities in LHa for UNIX's path name handling code. Specially constructed archive files may cause LHa to overwrite files or execute arbitrary code with the privileges of the user invoking LHa. This could be particularly harmful for automated systems that...

mozilla -- automated file upload

A malicious web page can cause an automated file upload from the victim's machine when viewed with Mozilla with Javascript enabled. This is due to a bug permitting default values for type="file" elements in certain situations...

consroot.exp

Hi there, here is a fully automated script for getting a root shell using a normal user account and remote-console acces. The Script was written by me based on an article from phrack.com article 53 - hacking forth by mudge ---snip--- --- consroot.exp " puts "\twhere MODE is one of:" puts "\t\tT =...

dune[0.6.7+-]: remote buffer overflow exploit. (httpd)

automated exploit for dune0.6.7+- webserver, source comments explain... original source: http://fakehalo.deadpig.org/xdune.c Vade79 - [email protected] - fakehalo. ----------------- example usage ----------------- v9@localhost v9$ ./xdune localhost dune0.6.7+-: remote buffer overflow exploi...

Samba Multiple Unspecified Remote Buffer Overflow Vulnerabilities

Description Multiple remote buffer overflow vulnerabilities have been reported for Samba and Samba-TNG. Although unspecified, it is likely that these issues are exploitable by an attacker to execute arbitrary code. All code executed in this manner would be run with the privileges of Samba,...

Microsoft IIS 5.0 (Windows XP2000NT 4.0) - WebDAV ntdll.dll Remote Buffer Overflow (3)

Microsoft IIS 5.0 Windows XP2000NT 4.0 - WebDAV ntdll.dll Remote Buffer Overflow 3 E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds...

Microsoft IIS 5.0 (Windows XP2000NT 4.0) - WebDAV ntdll.dll Remote Buffer Overflow (2)

Microsoft IIS 5.0 Windows XP2000NT 4.0 - WebDAV ntdll.dll Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function...

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU" and may be exploited through other programs that use the library if...

Microsoft IIS 5.0 (Windows XP2000NT 4.0) - WebDAV ntdll.dll Remote Buffer Overflow (1)

Microsoft IIS 5.0 Windows XP2000NT 4.0 - WebDAV ntdll.dll Remote Buffer Overflow 1 E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds...

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (1)

E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU"...

Microsoft Windows ntdll.dll Buffer Overflow Vulnerability

Description The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU" and may be exploited through other programs that use the library if an attack vector permits it. One of these...

[UNIX] Sourceforge Jacobuddy Cross Site Scripting (XSS) and Upload Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

[SECURITY] [DSA 186-1] New log2mail packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 186-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2002 http://www.debian.org/security/faq -...

Microsoft Security Bulletin MS02-059: Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure (Q330008)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure Q330008 Date: 16 October 2002 Software: Microsoftr Word and Microsoftr Excel Impact: Information...

[SECURITY] [DSA 141-1] New mpack packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 141-1 [email protected] http://www.debian.org/security/ Martin Schulze August 1st, 2002 - -------------------------------------------------------------------------- Package : mpack...

[SECURITY] [DSA 035-1] New version of man2html available

---------------------------------------------------------------------------- Debian Security Advisory DSA-035-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : man2html...

[SECURITY] [DSA 025-1] New sparc packages of OpenSSH released

---------------------------------------------------------------------------- Debian Security Advisory DSA-025-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28, 2001 - ---------------------------------------------------------------------------- Package : openssh...

Cisco (Multiple Products) - Automated Tool

!/usr/bin/perl Written by hypoclear - http://hypoclear.cjb.net Thong-th-thong-th-thong.pl AKA thong.pl is a PERL script which automates several attacks against various Cisco products. To be specific: 12-13-00 - Cisco Catalyst ssh Protocol Mismatch DoS Vulnerability 11-28-00 - Cisco 675 Web...

[SECURITY] [DSA-011-1] New version of mgetty released

Package: mgetty Vulnerability: insecure tempfile Debian-specific: no Immunix reports that mgetty does not create temporary files in a secure manner, which could lead to a symlink attack. This has been corrected in mgetty 1.1.21-3potato1 We recommend you upgrade your mgetty package immediately. wg...