ESET SysInspector - 1.1.1.0 (esiadrv.sys) Proof of Concept Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...

ESET SysInspector 1.1.1.0 - esiadrv.sys (PoC)

ESET SysInspector 1.1.1.0 - esiadrv.sys PoC //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected...

ESET SysInspector 1.1.1.0 - 'esiadrv.sys' (PoC)

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | // // | ESET System Analyzer Tool -...

The latest Discuz! NT2. 5 vulnerability-vulnerability warning-the black bar safety net

Author: hackest H. S. T. This article has been published in the hacker X-Files for 2 0 0 8 P 1 0 issue of the magazine on After the author published on the blog, such as reproduced please retain this information! Summer, passion in August, so excited about the Beijing Olympic Games has finally...

Google Chrome Browser Carriage Return Null Object Memory Exhaustion

Exploit for unknown platform in category dos / poc =================================================================== Google Chrome Browser Carriage Return Null Object Memory Exhaustion =================================================================== Google Chrome Carriage Return Null Object...

deslockvldptokn-dos.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | /...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= DESlock+ 3.2.7 vdlptokn.sys Local Denial of Service Exploit =============================================================...

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes

win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes. Shellcode exploit for win32 platform / PEB Kernel32.dll ImageBase Finder Ascii Printable Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be...

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes

Exploit for win32 platform in category shellcode ============================================================= win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes ============================================================= / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi...

Discuz!NT 2.5 showuser.aspx注入漏洞

No description provided by source...

win32 connectback, receive, save and execute shellcode

No description provided by source. ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by loco ; All Rights Reserved ; ; NOTE: Compatible with Windows NT based operating systems. IPv4 only. ; ; .386 .model flat, stdcall option casemap:none assume fs:flat include...

win32 connectback, receive, save and execute shellcode

Exploit for win32 platform in category shellcode ====================================================== win32 connectback, receive, save and execute shellcode ====================================================== ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by...

win32 connectback, receive, save and execute shellcode

win32 connectback, receive, save and execute shellcode. Shellcode exploit for win32 platform ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by loco ; All Rights Reserved ; ; NOTE: Compatible with Windows NT based operating systems. IPv4 only. ; ; .386 .model flat...

Citrix MetaFrame Privilege Escalation

INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ http://www.security.org.br/ ADVISORY/1907 - Citrix MetaFrame Privilege Escalation PRIORITY: Low I - INTRUDERS: ---------------- Intruders Tiger Team Security http://www.intruders.com.br/ is a SecurityLabs...

MS00-049:Microsoft Office 脚本允许远程保存恶意文件

如果一个Web站点在web页面中嵌入恶意脚本,它调用一个Excel 2000或者PowerPoint文件， 当用户访问这个站点时可能导致一个远程文件可能是恶意的被保存到该用户的硬盘上。 Microsoft Excel 2000 Microsoft PowerPoint 2000 Microsoft PowerPoint 97.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 微软已经提供了补丁程序： Microsoft Excel...

Outlook Express 6 恶意附件保护绕过漏洞

BUGTRAQ ID: 3271 微软OutLook Express 6中带了一个新的安全特性，额可以阻止用户打开或者保存可能有 害的附件。 然而，这个特性存在一个漏洞。攻击者可以通过在邮件中嵌入一个frame来绕过上述保护。 当攻击者在frame中嵌入一个".exe"或者“.bat"文件时，如果用户试图打开这个文件，恶 意程序可能被执行。用户也可以将其保存在硬盘上。 Microsoft Outlook Express 6.0 - Microsoft Windows ME - Microsoft Windows 98se - Microsoft Windows 98 - Microsof...

Microsoft IE 5.01/5.5 DHTMLED远程文件读取漏洞

Microsoft IE 5.5/5.01中DHTMLED（动态HTML编辑控制）部分的实现存在安全问题。可能允许 一个恶意站点非法读取远程客户主机上的已知文件的内容。这种攻击也可以通过发送HTML格式的 邮件给那些使用Outlook的用户来实现。 动态HTML编辑控制是一种让IE具有WYSIWYG HTML编辑器功能的机制。然而DOM安全模型没有正确 处理通过DHTMLED来使用IFRAME的情况，导致IFRAME的内容可以被重定向到某个web server IFRAME可以被设置为从已知的本地文件读取。下面是一个例子代码： dh.DOM.all.I1.focus;...