9595 matches found
Multiple Vendor BIOS Keyboard Buffer Password Persistence Weakness (1)
No description provided by source. source: http://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running o...
IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...
Microsoft NT 4.0 RAS/PPTP Malformed Control Packet Denial of Service Attack
No description provided by source. source: http://www.securityfocus.com/bid/2111/info Quoted from a Microsoft FAQ, Point-to-Point-Tunneling Protocol PPTP is a new networking technology that supports multiprotocol virtual private networks VPN, enabling remote users to access corporate networks...
WinXP SP2 Fr Download and Exec Shellcode
No description provided by source. Exploit Title winxp sp2 fr download & exec :: Date 06/5/2010 Author : CrackMaN :: code: ;------------------------------------------- .586 .model flat,stdcall option casemap:none include windows.inc include user32.inc include kernel32.inc include shell32.inc...
ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)
No description provided by source. $Id: proftpsreplace.rb 11526 2011-01-09 23:33:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Windows Server 2008 R1 Local Denial of Service
No description provided by source. Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the...
Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow
No description provided by source. $Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Portal Pack 6.0 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17628/info Portal Pack is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5310/info A vulnerability in Microsoft SQL Server 2000 could allow remote attackers to access target hosts. A problem in the SQL Server Resolution Service allows a remote attacker to execute arbitrary code on a vulnerable...
Zinf 2.2.1 - Local Buffer Overflow Exploit
No description provided by source. / -------------------------------Advisory---------------------------------- Luigi Auriemma aluigiaaaattttttautisticiD000torg I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version ...
MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1109/info The dvwssr.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack has a remotely exploitable buffer overflow. This attack will result in the service no longer accepting...
Media Player classic StatsReader (.stats file) stack buffer Overflow PoC
No description provided by source. ! /usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web:...
MP3 Workstation 9.2.1.1.2 - SEH exploit
No description provided by source. MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain ...
superengine CMS (Custom Pack) SQL Injection Vulnerability
No description provided by source. || | / \ / / | | \ / \ / / \ \ /\ /| | |/ | \ / \ / ||/ /|| /\ / / / / .org Author: 10n1z3d 10n1z3datwdotcn Date: 15/02/2010 --------------------------------------------------------- superengine CMS Custom Pack SQL Injection Vulnerability...
IBM DB2 < 9.5 pack 3a - Connect Denial of Service Exploit
No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 50000 sockobj.send...
Internet Explorer 4.0,Outlook 2000/5.5 MSHTML.DLL Crash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2202/info MSHTML.DLL is the shared library for parsing HTML in Internet Explorer and related applications. It may be possible for an attacker to crash this library remotely and cause a denial of service with special Jscri...
Microsoft Windows XP TSShutdn.exe Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the TSShutdn.exe command to...
Media Player 6.4.9.1 with K-Lite Codec Pack - DoS/Crash (.avi)
No description provided by source. Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vist...
Microsoft IIS 3.0/4.0 Double Byte Code Page Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works is as...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc4 echo Usage: php...