AOL Instant Messenger AIM "Away" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

Microsoft SQL Server Xp_sprintf 缓冲区溢出

Microsoft SQL Server 6.5Service Pack 5以前的版本中有一个存储过程xpsprintf存在一个 缓冲区溢出问题。攻击者可以使用这个存储过程使服务器崩溃，并可能在运行SQL server的系统 中获得管理员控制权限。 Microsoft SQL Server 6.5 Microsoft SQL Server 6.0 - Microsoft Windows NT 4.00 更新到更高版本的SQL Server6.5...

Microsoft Internet Explorer New ActiveX对象字符串串联内存破坏漏洞

BUGTRAQ ID: 30219 CNCAN ID：CNCAN-2008071510 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer new ActiveX对象处理存在内存破坏，远程攻击者可以利用漏洞对程序进行拒绝服务攻击，可能导致任意代码执行。 构建使用New ActiveX对象字符串的串联，当Internet Explorer解析时可导致应用程序崩溃，通过使用Javascript aka heapspray填充内存的方法可控制堆，导致以应用程序权限执行任意指令。 Microsoft...

Forum Pay Per Post Exchange <= 2.0 (catid) SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

forumpayperpost-sql.txt

-+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

Telephone Directory 2008 Arbitrary Delete Contact Exploit

No description provided by source. !/usr/bin/perl -w Telephone Directory 2008 = Arbitrary Delete Contact Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya...

HP Web JetAdmin 6.5 (connectedNodes.ovpl) Remote Root Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; This is an exploit for HP Web JetAdmin, the printer management server from HP. It is NOT about printers! The service usually runs on port 8000 on Windows, Solaris or Linux boxes. Greetz: The Phenoelit People, c-base crew, EEyE rock...

MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)

No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...

Multiple Cisco Products Vulnerabilities Exploit (Cisco Global Exploiter)

No description provided by source. !/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main ...

Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net

Haiyang the webshell has a switch is to control what logged in webshell. Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...

[SECURITY] Fedora 9 Update: rdesktop-1.6.0-1.fc9

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...

Image hijacking application-vulnerability warning-the black bar safety net

Usually wesince the start of the is mostly by the registry startup items, folders, startup items, services start, etc., however there is a people do not common since the start of the method, he is different from the file Association start, he was able to hijack a specific program, it explained fr...

authentix-xss.txt

Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...

Microsoft Office Publisher多个拒绝服务漏洞

BUGTRAQ ID: 26982 CNCAN ID:CNCAN-2007122407 Microsoft Office Publisher是一款微软提供的桌面出版应用软件。 Microsoft Office Publisher处理特殊构建的程序存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立一个Publisher文件，并修改00006B90到00006D90为A，可导致应用程序崩溃。或者建立的新文件增加一个使用多个“A”的"wordart"选项，然后修改000077D0到000079B0为A。可导致应用程序崩溃。 Microsoft Publisher 2007 0...

Windows 9x/NT/2k/XP PEB method 35 bytes

No description provided by source. /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic code designed to run on both Windows 9x and NT based systems. The code has been optimized to not have any 00h bytes so that you wont hav...

Microsoft Internet Explorer setExpression远程代码漏洞

CVE ID:CVE-2007-3902 CNCVE ID:CNCVE-20073902 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理CRecalcProperty函数存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于mshtml.dll的CRecalcProperty函数中，当在调用setExpressio方法后渲染HTML，之后跟随编程化建立元素的outerHTML属性的修改，有问题代码会引用之前释放的内存地址而导致代码执行。 Microsoft...

Microsoft Internet Explorer DHTML对象内存破坏漏洞

BUGTRAQ ID: 26427 CVE ID:CVE- 2007-5347 CNCVE ID:CNCVE-20075347 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分特殊构建的HTML对象方法存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...

SuSE 10 Security Update : samba (ZYPP Patch Number 2556)

A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. CVE-2007-0452 In addition the following changes are included with these packages : - Move tdb utils to the client package. - The version string of binaries reported by the -V option now include the packag...

CVE-2002-2401

NTVDM.EXE in Windows 2000/NT/XP fails to verify user execution permissions for 16‑bit executables, allowing local users to bypass the loader and run arbitrary programs. Root cause: missing permission verification on 16‑bit file execution. Mitigation/remediation details are not provided in the con...

CVE-2002-2401: Undefined Security Weakness

NT Virtual DOS Machine NTVDM.EXE in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs...