MS Windows InternalOpenColorProfile Heap Overflow PoC (MS08-046)

No description provided by source. EMRSETICMPROFILEA Heap Overflow DOS By Ac!dDrop related to MS08-046 Tested on windows Xp professional Sp2 mscms.dll 5.1.2600.2709 gdi32.dll 5.1.2600.2818 Causes Windows explorer and Internet explorer to crash. You can run arbitary code...

Improper access control

ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-4512

ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-4512

The CVE-2008-4512 entry concerns an ASP/MS Access Shoutbox (likely v1.1 beta) that stores the database file db/shoutdb.mdb under the web root with insufficient access control. This misconfiguration allows remote attackers to retrieve sensitive information via a direct request. The underlying root...

CVE-2008-4500

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

Command injection

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service CPU consumption via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1"...

MS Windows GDI (EMR_COLORMATCHTOTARGETW) Exploit MS08-021

Exploit for unknown platform in category remote exploits ========================================================= MS Windows GDI EMRCOLORMATCHTOTARGETW Exploit MS08-021 ========================================================= EMRCOLORMATCHTOTARGETW stack buffer overflow exploit By Ac!dDrop This...

msie7-dos.txt

MS Internet Explorer 7 Denial Of Service Exploit MS Internet Explorer 7 Denial Of Service Exploit var x=String.fromCharCode550; var x2=""; var x3=""; fori=0;i WiLdBoY a.k.a UniquE-KeyUniquE-Cracker n.s.n Mert KAYALAR [email protected] -Software Hunter-...

CVE-2008-4110

The OpenVAS/OpenVAS-derived data (plus CVE-2008-4110 details) confirms a buffer overflow in the Microsoft SQL Server 2000 ActiveX control: sqlvdir.dll (SQLVDIRLib.SQLVDirControl) that is loaded from Tools\Binn\sqlvdir.dll. The vulnerability is triggered by a long URL passed as the second argument...

MS Windows WRITE_ANDX SMB command handling Kernel DoS (meta)

No description provided by source. require 'msf/core' module Msf module Exploits module Test class BugTest Msf::Exploit::Remote include Exploit::Remote::SMB def initializeinfo = superupdateinfoinfo, 'Name' = 'test exploit', 'Description' = "tests", 'Author' = 'tests', 'License' = MSFLICENSE,...

Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability

Insomnia Security Vulnerability Advisory: ISVA-080910.1 Name: MS Office OneNote URL Handling Vulnerability Released: 10 September 2008 Vendor Link: http://http://office.microsoft.com/onenote Affected Products: MS Office Onenote 2007 MS Office 2003 and 2007 have vulnerable components Original...

aspwebalbum 3.2 - Multiple Vulnerabilities

aspwebalbum 3.2 - Multiple Vulnerabilities - Discovered by AleminKrali - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com - [email protected] - Dork ? : album.asp?pic= .jpg cat=...

Masir Camp E-Shop Module <= 3.0 (ordercode) SQL Injection Vuln

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1...

masir-sql.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1. Description: Masir Camp is an...

Masir Camp E-Shop Module <= 3.0 (ordercode) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== Masir Camp E-Shop Module = 3.0 ordercode SQL Injection Vuln ============================================================== Title: Masir Camp E-Shop Module = 3.0 SQL Injection...

Masir Camp E-Shop Module 3.0 - ordercode SQL Injection

Masir Camp E-Shop Module 3.0 - ordercode SQL Injection www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory:...

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1. Description: Masir Camp is an...

simpgal-sql.txt

Simple gallery pcatid SQL Injection Vulnerability By: e.wiZz! [email protected] Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: Luigi Auriemma,str0ke In the wild.... Project Name: Simple Gallery ASP Script Site: preprojects.com Vulnerability: SQL Injection PoC on demo site :...

MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Fedora 8 : phpMyAdmin-2.11.8.1-1.fc8 (2008-6810)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...