1393 matches found
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
No description provided by source. Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is...
Microsoft Outlook Express 6.0 MHTML Forced File Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component...
Simply Sites RGV Local File Inclusion
No description provided by source. Title : Simply Sites RGV Local File Inclusion Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Simply Sites RGV Local File Inclusion Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected] Contact :...
Mac OS X < 2007-005 - (vpnd) Local Privilege Escalation Exploit
Copyright c 2007 Kevin Finisterre kflists at digitalmunition.com CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 http://www.exploit-db.com/sploits/05302007-vpenis.tar.gz milw0rm.com 2007-05-30...
World in Conflict 1.008 - NULL Pointer Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29888/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash the affected application,...
Online Job Board (Auth Bypass) SQL Injection Vulnerability
No description provided by source. '/ -.- --------------------oOO------OOo----------------------------- | Online Job Board Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3r...
Vilistextum 2.6.6 HTML Attribute Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11979/info Vilistextum is prone to a buffer overflow vulnerability. This issue is exposed when the application parses HTML attributes while converting an HTML file to text/ASCII. Since HTML files will likely originate fro...
Panda Internet Security/Antivirus+Firewall 2008 - CPoint.sys Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate...
Flex Timesheet Authentication Bypass Vulnerability
No description provided by source. =================================================== Flex Timesheet - Authentication Bypass Vulnerability =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0...
Ability Mail Server 2013 - Password Reset CSRF from Stored XSS (Web UI)
No description provided by source. On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a user named, victim, with a...
Rakkarsoft RakNet 2.33 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13862/info Rakkarsoft RakNet is affected by a remote denial of service vulnerability. Reportedly, the vulnerability presents itself when the library handles an empty UDP packet. RakNet 2.33 and prior versions released...
Joomla Component com_packages SQL Injection Vulnerability
No description provided by source. + Title : Joomla Component compackages SQL Injection Vulnerability + Author: Kernel Security Group + Data : 2010-05-19 !! + Title : Joomla Component compackages SQL Injection Vulnerability + Author : Kernel Security Group By D3v1l.blackhat + Homepage :...
HP Data Protector 6.11 Remote Buffer Overflow + DEP Bypass
No description provided by source. !/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference:...
Pragma Systems InterAccess TelnetD Server 4.0 Build 4 Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/995/info The Pragma Systems InterAccess TelnetID Server 4.0 Build 4 has an unchecked buffer in the code that handles login commands. Arbitrary code is capable of being executed on the InterAccess TelnetD Server if a strin...
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle exceptional conditions in a proper manner. Master of Orion...
Apache Struts < 2.2.0 - Remote Command Execution
No description provided by source. $Id: strutscodeexec.rb 13586 2011-08-19 05:59:32Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Audio File Library 0.2.6 - (libaudiofile) 'msadpcm.c' WAV File Processing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33066/info Audio File Library 'libaudiofile' is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary...
Wietse Venema Rpcbind Replacement 2.1 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1893/info A remote root vulnerability exists in certain versions of rpcbind portmapper. RPC Remote Procedure Call allows a program to request a service from a program located in another computer in a network without...
Gearbox Software Halo Game 1.x Client Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply from a server may crash the affect...
httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)
No description provided by source. Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested...