Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow

!/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP English 12.27.2009 Author: Ron Henry -...

CVE-2009-4435

creationtimestamp| type| source ---|---|--- 2009-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33420 2009-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33419...

CVE-2009-4142

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33415 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33414...

CVE-2009-4437

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10520...

CVE-2009-4429

creationtimestamp| type| source ---|---|--- 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10485 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33410...

SAP RFC SDK — Memory Corruption

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6400-7.20 and SAP GUI 7.10-7.20 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 16.12.2009 Vendor response: 16.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

CVE-2009-3701

creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33406 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33408 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33407 2009-12-17...

CVE-2009-4364

creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10458 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10461...

Ez Faq Maker Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

SAP NetWaver SLD — Multiple XSS

Application: SAP NetWeaver SLD Versions Affected: 6.4-7.02 Vendor URL: Bugs: XSS Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 Last response: 06.05.2010 Date of Public Advisory: 13.07.2010 Author: Alexander Polyakov and Alexey Troshichev Description SAP NetWeaver System has...

CVE-2009-4462

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10451 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33403 2026-06-19 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monuyvqjyp2n...

Billwerx RC 3.1 XSS / SQL Injection

Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context of the admin's browser. If the user...

SAP NetWeaver DTR — Multiple XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Design Time Repository 6.4-7.2 Vendor URL: Bugs: XSS Exploits: YES Reported: 14.12.2009 Vendor response: 14.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexander Polyakov and Alexey...

Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Piwigo 2.0.6 - Multiple Vulnerabilities

Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk NewsLetter - Cross-Site Request Forgery

Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...