Alt-N MDaemon Free 12.5.4 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT...

winwebmail server 3.8.1.6 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: WinWebMail Server Version: 3.8.1.6 Vendor Site: http://www.winwebmail.net Software Download: http://www.winwebmail.net/email-server-download.html Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

Citrix Provisioning Services streamprocess.exe 0x40020000 Opcode Integer Underflow

Added: 07/30/2012 BID: 49803 OSVDB: 75780 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Services up to and including version 5.6 Service Pack 1 are...

Microsoft Office SharePoint Server 2007 Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Sysax Multi-Server 5.64 Create Folder Buffer Overflow

Exploit for windows platform in category remote exploits require 'msf/core' require 'base64' class Metasploit3 'Sysax Multi Server 5.64 Create Folder BoF', 'Description' = %q This module exploits a stack buffer overflow in the create folder function in Sysax Multi Server 5.64. This issue was fixe...

Sysax Multi Server 5.64 Buffer Overflow

require 'msf/core' require 'base64' class Metasploit3 'Sysax Multi Server 5.64 Create Folder BoF', 'Description' = %q This module exploits a stack buffer overflow in the create folder function in Sysax Multi Server 5.64. This issue was fixed in 5.66. You must have valid credentials to trigger the...

Sysax Multi Server 5.64 Create Folder Buffer Overflow

This module exploits a stack buffer overflow in the create folder function in Sysax Multi Server 5.64. This issue was fixed in 5.66. In order to trigger the vulnerability valid credentials with the create folder permission must be provided. The HTTP option must be enabled on Sysax too. This modul...

Design/Logic Flaw

Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Microsoft SharePoint CVE-2012-1862 URI重定向漏洞

Bugtraq ID:54315 CVE ID:CVE-2012-1862 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint Server存在一个开放重定向漏洞，允许攻击者通过特制URL，重定向用户到任意WEB站点，进行网络钓鱼等攻击。 0 Microsoft InfoPath 2010 Microsoft InfoPath 2007 SP2 Microsoft InfoPath 2007 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信...

CVE-2012-1860: Undefined Security Weakness

Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service data modificati...

Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution

This module exploits an authentication bypass vulnerability on Avaya IP Office Customer Call Reporter, which allows a remote user to upload arbitrary files through the ImageUpload.ashx component. It can be abused to upload and execute arbitrary ASP .NET code. The vulnerability has been tested...

Symantec PcAnywhere 12.5.0 Login and Password Field Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import...

Edimestre Plus 2.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Toko Flamboyan Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept

Exploit for windows platform in category dos / poc Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...

Pro Clan Manager 0.4.2 Administrative Bypass / Shell Upload

=========================================== Pro Clan Manager 0.4.2 Mullti Vulnerability =========================================== Vendor: http://garr.dl.sourceforge.net/project/autoweb/Pro%20Clan%20Manager/0.4.2/proclanmanager.0.4.2.zip Date: 2012-06-06 Author : indoushka Tested on : windows SP...

EZHomeTech Ezserver 6.4 - Remote Stack Overflow

Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...