CVE-2005-1256: Undefined Security Weakness

Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...

CVE-2005-1002

logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...

CVE-2005-1347: Undefined Security Weakness

UNVERIFIABLE NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader AcroRd32.exe 6.0 and earlier allows remote attackers to cause a denial of service "Invalid-ID-Handle-Error" error and modify memory beginning at a particular address,...

MS Windows (HTA) Script Execution Exploit (MS05-016)

Exploit for unknown platform in category local exploits ==================================================== MS Windows HTA Script Execution Exploit MS05-016 ==================================================== / Changed date in db to place it on the main page instead of it being bumped off /str0...

CVE-2005-1002

The CVE-2005-1002 entry concerns logwebftbs2000.exe in Logics Software File Transfer (LOG-FT). The vulnerable component is the file-transfer web client/server, where an attacker can read arbitrary files by supplying modified parameters VAR_FT_LANG and VAR_FT_TMPL. The cited reports describe remot...

CVE-2005-1002

logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...

CVE-2005-1002: Undefined Security Weakness

logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...

phpBB 2.0.12 - Change User Rights Authentication Bypass

/ Paisterist's code was nice but heres mil's version. precompiled: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...

CVE-2005-0707: Undefined Security Weakness

Buffer overflow in the IMAP daemon IMAP4d32.exe for Ipswitch Collaboration Suite ICS before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command...

CVE-2004-1649

Technical details about CVE-2004-1649 are not publicly provided in the supplied documents; no affected products, versions, or fixes are disclosed here. Monitor for updates.

CVE-2004-1624

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

CVE-2004-1649: Undefined Security Weakness

Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfofile command line parameter. NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future...

CVE-2004-1624: Undefined Security Weakness

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

CVE-2004-1361

The CVE-2004-1361 issue affects Microsoft Windows where winhlp32.exe parses help files (.hlp). Affected: Windows NT, Windows 2000 (SP4), Windows XP (SP2), Windows 2003; vulnerability arises from an integer/length miscalculation in handling .hlp content, causing a heap-based buffer overflow. Conse...

CVE-2004-1306: Undefined Security Weakness

Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file...

CVE-2004-1361: Undefined Security Weakness

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow...

CVE-2004-1306

Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file...

Microsoft IIS WebDAV Write Access Code Execution

This module can be used to execute a payload on IIS servers that have world-writeable directories. The payload is uploaded as an ASP script via a WebDAV PUT request. The target IIS machine must meet these conditions to be considered as exploitable: It allows 'Script resource access', Read and Wri...

Microsoft Windows XP/2000/2003 - 'winhlp32' Phrase Heap Overflow

source: https://www.securityfocus.com/bid/12092/info Microsoft Windows is prone to a heap-based buffer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is processed by the program. Successful exploitation may allo...

Microsoft Windows XP/2000/2003 - 'winhlp32' Phrase Integer Overflow

source: https://www.securityfocus.com/bid/12091/info Microsoft Windows is prone to an integer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is processed by the program. Successful exploitation may allow executi...