Microsoft Internet Explorer - Remote Code Execution

CMDExe - Windows Exploit - Remote code execution with parameters - Proof of ConceptMore info about this exploit can be found at hhttp://freehost19.websamba.com/shreddersub7/expl-discuss.htm. © 2004 ShredderSub7 function DisplayLocStrings Title.innerHTML = TAGSYSCONFIG; ConfigLink.innerHTML =...

[Full-Disclosure] Microsoft Help and Support Center argument injection vulnerability

OVERVIEW ======== "Help and Support Center HSC is a feature in Windows that provides help on a variety of topics" from www.microsoft.com. It can be accessed via HCP: URLs. HSC is installed by default on Windows XP and Windows Server 2003 systems. An argument injection vulnerability in HSC allows ...

Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)

/ EDB Note: This will just "test" the vulnerability. EDB Note: An exploit version can be found here https://www.exploit-db.com/exploits/145/ / / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by Christophe Devine and Julien Tinnes posted on Bugtraq mailing li...

cue.sh

!/usr/bin/ksh THIS IS A DANGEROUS SCRIPT !!! READ THE CODE PRIOR TO ./! This is just a proof of concept. Don't use for malicious purpose. If ever you decide to run that script, please read the code carefully before! Emilie Chang, 2001. Dedicated to Scriptors of Doom and HERT people. Good job...

MS Windows (Jolt2.c) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================== MS Windows Jolt2.c Denial of Service Exploit ============================================== / File: jolt2.c Author: Phonix Date: 23-May-00 Description: This is the proof-of-concept code for the Windo...

re, suidperl; more

hi, yes, i hoped to announce this bug to the perl-developers before it came public; but i think they read BQ ... Michal ... : So far, there are more security-releated apps which use /bin/mail for logging Once I was also fallen into thinking that it can be secure, until Dave Dittrich pointed that ...

unsetenv.txt

o unsetenv off-by-one error: The unsetenv function in glibc 2.1.1 suffers from a problem whereby when running through the environment variables, if the name of the variable being unset is present twice consecutively, the second is not destroyed. unsetenv is sometimes used by programs that depend ...

netscape4.x_bof.txt

Subject: Re: Netscape communicator 4.06J, 4.5J-4.6J, 4.61e Buffer Overflow To: [email protected] Hello David Parker$B!!Bwrites: I tried the 4 exploit test links, and they all crashed Netscape but didn't cause any bluescreens or run any programs. I have win98, Netscape 4.5 128-bit, and the...

netscape.js.table.dos.txt

http://www.securiteam.com/exploits/NetscapeCommunicatorJav.html Article Title 26/6/99 Netscape Communicator JavaScript crash Article Summary Due to an HTML parsing problem, a simple html page containing JavaScript can crash the Netscape communicator browser. Article Details The following HTML cod...