2559 matches found
CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit (meta)
No description provided by source. $Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
citect_scada_odbc.rb.txt
$Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ msfcli...
CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)
CitectSCADA ODBC Server - Remote Stack Buffer Overflow Metasploit $Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit (meta)
Exploit for unknown platform in category remote exploits =================================================================== CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit meta =================================================================== $Id: citectscadaodbc.rb This file is...
CVE-2008-3893
CVE-2008-3893 affects Microsoft BitLocker in Windows Vista prior to SP1. The issue arises because pre-boot authentication passwords are stored in the BIOS keyboard buffer and the buffer is not cleared during boot, allowing local users to read memory locations and potentially recover sensitive inf...
FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)
!/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using flash9f.ocx. use warnings; use strict; use IO::Socket; win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x6b"...
Microsoft Windows IPsec信息泄露漏洞（MS08-047）
BUGTRAQ ID: 30634 CVECAN ID: CVE-2008-2246 Microsoft Windows是微软发布的非常流行的操作系统。 在从Windows Server 2003域向Windows Server 2008域导入IPsec策略时，系统可能会忽略IPsec策略，这样会以明文传输本应加密的数据。导致泄露在网络上本应被加密的信息，查看网络通讯的攻击者能够查看并且可能修改通讯的内容。请注意此漏洞不允许攻击者直接执行代码或提升他们的用户权限，但可能用于收集有用的信息，从而试图进一步入侵受影响的系统或网络。 Microsoft Windows Vista SP1...
CVE-2008-1455
A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted...
Novell iManager < 2.7 SP1 Property Book Pages Arbitrary Plug-in Studio Deletion
Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user. %NASLMINLEVEL 70300 C Tenable Network Securit...
MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)
No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...
Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit
No description provided by source. / Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit Bug discoveried by iDEFENSE Security http://www.idefense.com Exploit coded By ATmaCA Copyright ?2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...
Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）
BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...
CVE-2008-1440
Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...
Microsoft Windows蓝牙栈远程代码执行漏洞（MS08-030）
BUGTRAQ ID: 29522 CVECAN ID: CVE-2008-1453 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的蓝牙栈没有正确地处理服务描述请求，如果远程攻击者以很快地速度向有漏洞的系统发送了大量特制的SDP报文的话，就可能以提升的权限运行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除日期；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
No description provided by source. !/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste yo...
YahooPOPs <= 1.6 SMTP Port Buffer Overflow Exploit
No description provided by source. / YahooPOPS v1.6 and prior SMTP port buffer overflow exploit v0.1 Exploit code by class101 at DFind.kd-team.com Bind a shellcode to the port 101. Thanx to Behrang [email protected] for the bug discovery Thanx to HDMoore and Metasploit.com for their...
WS_FTP Server <= 4.0.2 ALLO Remote Buffer Overflow Exploit
No description provided by source. / Ipswitch WSFTP Server = 4.0.2 ALLO exploit c2004 Hugh Mann [email protected] This exploit has been tested with WSFTP Server 4.0.2.EVAL, Windows XP SP1 NOTE: - The exploit assumes the user has a total file size limit. If the user only has...
MS Windows JPEG GDI+ Overflow Shellcoded Exploit
No description provided by source. // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx...
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
!/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just telnet to port:4444 to get command prompt : BIG thanks...
Microsoft Visio多个远程代码执行漏洞（MS08-019）
BUGTRAQ ID: 28555,28556 CVECAN ID: CVE-2008-1089,CVE-2008-1090 Visio是微软Office套件中的图形编辑工具。 Microsoft Visio在打开Visio文件时没有正确地验证对象头数据，在从磁盘将特制的.DXF文件加载到内存时没有正确地验证内存分配。如果用户受骗打开了畸形文档，就可能触发这些漏洞，导致执行任意指令。 Microsoft Visio 2007 SP1 Microsoft Visio 2007 Microsoft Visio 2003 SP3 Microsoft Visio 2003 SP2 Microso...