Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit (win/osx)

No description provided by source. Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code...

aquick-winosx.txt

Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...

Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit (win/osx)

Exploit for multiple platform in category remote exploits ================================================================= Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit win/osx ================================================================= Copyright C 2007 Subreption LLC. All rights...

openSUSE 10 Security Update : mono-core (mono-core-2373)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

eGov Content Manager Cross Site Scripting Vulrnability

HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i milw0rm.com 2007-07-24...

LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit ========================================================== In God We Trust, VDA Labs, LLC function repeatn,c retval=""; fo...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

http://marmarahosting.org/infinity.txt

"Infinity Solutions LLC" e/description.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam spec.note : "Live The Life" 1- example.com/patch/description.asp?id=sql methot 1- example.com/e/description.asp?id=sql meth...

ByPass In PortalApp

Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...

gis-mdb.txt

Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...

Linux Kernel 2.6.x - AppleTalk ATalk_Sum_SKB Function Denial of Service

source: https://www.securityfocus.com/bid/23376/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when malformed AppleTalk frames are processed. An attacker can exploit this issue to crash host computers, effectively denying service to legitimate user...

Frontbase 4.2.7 - (Authenticated) Remote Buffer Overflow (2.2)

Frontbase 4.2.7 - Authenticated Remote Buffer Overflow 2.2 / Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit : Frontbase = 4.2.7...

Cadre PHP Framework Remote File Include Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV63$2007 ------------------------------------------------------------------------------------ ECHOADV63$2007 Cadre remote file inclusion...

[ECHO_ADV_63$2007] Cadre remote file inclusion

ECHOADV63$2007 Cadre remote file inclusion ----------------------------------------------- Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 31st 2007 Location : Indonesia, Jakarta web : http://echo.or.id/adv/adv63-y3dips-2007.txt Critical Lvl : Critical...

Cadre PHP Framework Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================== Cadre PHP Framework Remote File Include Vulnerability ===================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / /...

Cadre PHP Framework - Remote File Inclusion

Cadre PHP Framework - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV63$2007 ------------------------------------------------------------------------------------ ECHOADV63$2007 Cadre remote file inclusion...

Application Enhancer (APE) 2.0.2 Local Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby Exploit Of The Apes: A practical pwnage for Application UNEnhancer aka APU c 2006 LMH lmh at info-pull.com and Johnny Pwnerseed. This goes dedicated to macdev. For the childish flaming and great brain lag. Lesson: Don't talk about stuff you have N...