HP Client Automation Command Injection

This module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon radexecd.exe, which doesn't authenticate execution requests by default. This module has been tested...

HP Data Protector Backup Client Service Remote Code Execution

This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2...

HP Data Protector Backup Client Service Directory Traversal

This module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists in the Backup Client Service OmniInet.exe and is triggered when parsing packets with opcode 42. This module has been tested successfully on HP Data Protector 6.20 on...

Easy Karaokay Player '.wav'文件除零错误拒绝服务漏洞

No description provided by source. !/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe...

Ofilter Player 1.1 - '.wav' Integer Division by Zero

?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda Malith Twitter: @OsandaMalith /!...

HP SiteScope issueSiebelCmd - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStagerVBS def...

HP SiteScope issueSiebelCmd Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStagerVBS def...

Easy Karaoke Player 3.3.31 Integer Division By Zero

!/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe E-Mail: [email protected]...

Microsoft Windows ndproxy.sys Local Privilege Escalation

Exploit for windows platform in category local exploits require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited...

Microsoft Windows ndproxy.sys Local Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

Microsoft Windows - 'ndproxy.sys' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

CVE-2013-3878: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Client Buffer Overrun Vulnerability."...

CVE-2013-5057: Undefined Security Weakness

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December...

CVE-2013-3899: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/1.1/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This Metasploit module exploits a directory traversal vulnerability on the version 11.52 of HP LoadRunner. The vulnerability exists on the EmulationAdmin web service, specifically in the copyFileToServer method, allowing to upload arbitrary files. This Metasploit module has been tested successful...

VulnCheck KEV: CVE-2013-5057

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December...

PT-2013-5935 · Nagios · Nagiosql

Name of the Vulnerable Software and Affected Versions: NagiosQL version 3.2 SP2 Description: The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to various pages,...

CVE-2013-6999

The impact is tied to Microsoft Windows Server 2008 SP2: the win32k.sys IsHandleEntrySecure function does not properly validate the tagPROCESSINFO pW32Job field, allowing local users to trigger a denial of service via crafted NtUserValidateHandleSecure calls, causing a NULL pointer dereference an...

CVE-2013-6999: Undefined Security Weakness

The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted...