Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

Freefloat FTP Server "Response" Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Free Float FTP server Response stack Buffer Overflow Exploit Date: 21-08-2011 Author: Debasish Mandal http://www.facebook.com/raza.whitehat Software Link: http://www.freefloat.com/sv/freefloat-ftp-server/freefloat-ftp-server.p...

GILE Internet Solutions SQL Injection

Exploit Title: GILE internet solutions Exploit http://localhost/path/newsdetail.php?NewId=1' http://localhost/path/newsdetail.php?NewId=inject here Demos http://www.kangfu.com.tw/newsdetail.php?NewId='4 http://www.sprites.com.tw/newsdetail.php?NewId='4...

CVE-2011-1966: Improper Input Validation

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...

CVE-2011-1968: Undefined Security Weakness

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service reboot by sending crafted RDP packets triggering access to an object that 1 was no...

CVE-2011-1871: Undefined Security Weakness

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

PT-2011-3508

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue arises from the DNS server's improper handling of NAPTR queries that trigger recursive processing. This allows remote...

CVE-2011-1970: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service service outage via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption...

Microsoft Windows DNS Server Uninitialized Memory Remote Denial of Service Vulnerability

Description The Microsoft Windows DNS Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the DNS server service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition...

Microsoft Windows TCP/IP ICMP CVE-2011-1871 Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to restart the affected system, therefore denying service to legitimate users. Technologies Affected Avaya Conferencing Standard Edition 6.0 Avaya Conferencing Standard Edition 6...

Acoustica Mixcraft 1.00 - Local Crash

Acoustica Mixcraft 1.00 - Local Crash !/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x...

Acoustica Mixcraft 1.00 Denial Of Service

!/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ; opend99y,"$file"; print d99y...

Acoustica Mixcraft 1.00 - Local Crash

!/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ; opend99y,"$file"; print d99y...

LiteServe 2.81 - 'PASV' Denial of Service

!/usr/bin/python Title: LiteServe 2.81 PASV Command DoS Author: Craig Freyman @cd1zz Date: Bug found July 25, 2011 - Vendor approved release August 7, 2011 Tested on Windows XP SP3 and Server 2003 SP2 Software: http://www.cmfperception.com/liteserve.html Notes: In certain conditions that I could...

Ruby随机数字生成本地拒绝服务漏洞

BUGTRAQ ID: 49015 CVE ID: CVE-2011-2686 Ruby是一种功能强大的面向对象的脚本语言。 Ruby在处理随机数字生成的实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成拒绝服务。 Yukihiro Matsumoto Ruby 1.8.7 x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/ !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Serv...

Omnicom Alpha 4.0e LPD Server Denial Of Service

!/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendor Notified 8/1/2011, Vendor Responded 8/2/2011,...

Braden Fleischer SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Braden Fleischer..SQL injection Vulnerability + Date : 28/07/2011 + Author : k's0uR! + Category : WebApps + d0rk : "site by: Braden Fleischer" + Faceb00k :...

Wireshark 1.4.0 Malformed IKE Packet Denial of Service

Wireshark 1.4.0 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.4.0 when send a specific malformed IKE packet that will cause a denial of service...

CVE-2011-1883

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...