333 matches found
Word Viewer OCX 3.2 Remote File Execution exploit
Exploit for unknown platform in category remote exploits ================================================= Word Viewer OCX 3.2 Remote File Execution exploit ================================================= ---------------------------------------------------------- Word viewer OCX V 3.2 Remote Fi...
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow PoC Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)
Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...
Stack overflow
Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x aka /uninstall option. NOTE: this issue might cross privilege boundaries if msiexec.exe is...
CVE-2008-2547: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x aka /uninstall option. NOTE: this issue might cross privilege boundaries if msiexec.exe is...
Microsoft Rich Textbox Control 6.0 (SP6) SaveFile() Insecure Method
Exploit for unknown platform in category remote exploits =================================================================== Microsoft Rich Textbox Control 6.0 SP6 SaveFile Insecure Method ===================================================================...
Memory corruption
Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service system shutdown or execute arbitrary code via a disk image with crafted GUID partition maps, which triggers memory corruption...
McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 - Source Remote (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
CVE-2006-3281: Improper Input Validation
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ %2e%2e%5c sequences and whose extension contains the CLSID Key identifier...
CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...
CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...
CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...
MS:CDE5337E-6617-42AE-AB13-65D897A4A64A
...
MS:A11AF77F-C26A-478D-97C7-4BD9470CEA1E
...
MS:9C911043-7F70-4555-B0D5-724AD163877B
...
MS:A9787757-BF1E-4D21-8114-464FD65EA313
...
MS:4F37443A-9ECE-4FCF-BF1F-B64F8CE27401
...
MS:27BA94EF-C1B7-4CD7-B091-7F818DEE7983
...