Apple QuickTime 7.27.3 - RSTP Response Universal

Apple QuickTime 7.27.3 - RSTP Response Universal Everyone Loves O|0+|O the Hypnotoad... |...| | | =o0O=====O0o=============================== | QuickTime RTSP Response Content-type | | remote stack rewrite exploit for IE 6/7 | | by Yag Kohha skyhole at gmail.com |...

BlueZ 1.x2.x - HIDD Bluetooh HID Command Injection

BlueZ 1.x2.x - HIDD Bluetooh HID Command Injection source: https://www.securityfocus.com/bid/22076/info BlueZ hidd is prone to a device-command-injection vulnerability. A remote attacker can exploit this issue to gain control of mouse and keyboard HIDs human interface device. This will allow the...

Yarssr 0.2.2 - GUI.PM Remote Code Injection

Yarssr 0.2.2 - GUI.PM Remote Code Injection source: www.securityfocus.com/bid/26273/info Yarssr is prone to a remote code-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to inject and execute arbitrary malicious Perl code with...

CellFactor REvolution 1.03 - Multiple Remote Code Execution Vulnerabilities

CellFactor REvolution 1.03 - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/25625/info CellFactor: Revolution is prone to multiple remote code-execution vulnerabilities, including a buffer-overflow issue and a format-string issue. Successfully exploiting...

Microsoft MSN Messenger 7.x8.0? - Video Remote Heap Overflow

Microsoft MSN Messenger 7.x8.0? - Video Remote Heap Overflow MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit thanks ole andre again, His ospy is perfect. 1.compile the dll. 2.inject the dll to msn messenger 7.0.777.0 's process. 3. choose "send my webcam" to a contact id who is online...

Yahoo! Messenger 8.1 - KDU_V32M.DLL Remote Denial of Service

Yahoo! Messenger 8.1 - KDUV32M.DLL Remote Denial of Service source: https://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This...

Symantec AntiVirus - symtdi.sys Local Privilege Escalation

Symantec AntiVirus - symtdi.sys Local Privilege Escalation Symantec AntiVirus symtdi.sys Local Privilege Escalation Author: Zohiartze Herce Site: http://48bits.com https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4178.rar 07122007-symTDIadvisory.rar milw0rm.com...

GDB 6.6 - Process_Coff_Symbol UPX File Buffer Overflow

GDB 6.6 - ProcessCoffSymbol UPX File Buffer Overflow source: https://www.securityfocus.com/bid/24291/info GDB is prone to a buffer-overflow vulnerability because it fails to properly check bounds when handling specially crafted executable files. Attackers could leverage this issue to run arbitrar...

ProFTPd 1.3.01.3.0a - mod_ctrls exec-shield Local Overflow

ProFTPd 1.3.01.3.0a - modctrls exec-shield Local Overflow ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3730.tgz 04132007-pr0ftpdmodctrls.tgz milw0rm.com 2007-04-13...

Microsoft Windows - Animated Cursor '.ani' Universal Generator

-------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz 2: Jamikazu, Skylined pretty good t-short on BH07 Europe -...

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...

Microsoft Windows - .doc Malformed Pointers Denial of Service

Microsoft Windows - .doc Malformed Pointers Denial of Service /\ Microsoft Windows .doc File Malformed Pointers DoS Just move your mouse on the file and explorer crashes. If it does not try to look at file properties. Bug comes from Ole32.dll: CMP DWORD PTR DS:EAX+EBX,3 and we can set EAX, EDX an...

Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation

source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromi...

Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2912.rar 12102006-sophosintifiniti.rar milw0rm.com 2006-12-10...

RunCMS 1.x - Avatar Arbitrary File Upload

RunCMS 1.x - Avatar Arbitrary File Upload source: https://www.securityfocus.com/bid/20874/info RunCMS is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process...

Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow

Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow source: https://www.securityfocus.com/bid/20180/info Call of Duty server is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently...

Apple QuickTime 67 - .FLC Movie COLOR_64 Chunk Overflow

Apple QuickTime 67 - .FLC Movie COLOR64 Chunk Overflow source: https://www.securityfocus.com/bid/19976/info Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary cod...

Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service

Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call...

RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Bypass

xx vnc-411-unixsrc.bl4ck/common/rfb/CConnection.cxx --- vnc-411-unixsrc/common/rfb/CConnection.cxx 2005-03-11 09:08:41.000000000 -0600 +++ vnc-411-unixsrc.bl4ck/common/rfb/CConnection.cxx 2006-05-15 14:03:30.000000000 -0500 @@ -183,7 +183,12 @@ // Inform the server of our decision if secType !=...

Empire 4.3.2 - strncat Denial of Service

Empire 4.3.2 - strncat Denial of Service Empire = 4.3.2 strncat Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1782.zip 05132006-empiredos.zip milw0rm.com 2006-05-14...