4849 matches found
POP Peeper 3.7 - Local Overflow (SEH)
!/usr/bin/ruby Title: POP Peeper 3.7 SEH Exploit Tested on: Windows XP SP2 EN Target: POP Peeper 3.7.0.0 Download Link: http://www.poppeeper.com/download.php Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r team appdata = ENV'APPDATA' file = appdata...
Opera 11.01 NULL Pointer Dereference
Opera 11.01 Null Ptr Derefer / +. Title : Opera 11.01 Null Pointer Derefernce +. Date : 15.03.2011 05:18 +. Author: echo +. Version: 11.01 +. Software link: http://www.opera.com/download/ +. Tested on : Win32 xp home sp 2 +. CVE : NULL --------------------------------------- 675B5646 MOV ECX,DWOR...
Kolibri <= v2.0 HTTP Server HEAD Buffer Overflow
Exploit for windows platform in category remote exploits $Id: kolibrihttp.rb 10887 2011-08-03 12:19:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability
Exploit Title: Imageview v6.0 Remote and Local Directory Traversal Vulnerability Google Dork: inurl:"/imageview6/" home : www.D99Y.com Date: 27/2/2011 Author: Difficult 511 Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip Version: 6.0 Tested on: windows xp sp2 file :...
Imageview 6.0 Directory Traversal
Exploit Title: Imageview v6.0 Remote and Local Directory Traversal Vulnerability Google Dork: inurl:"/imageview6/" home : www.D99Y.com Date: 27/2/2011 Author: Difficult 511 Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip Version: 6.0 Tested on: windows xp sp2 file :...
CVE-2011-0043
CVE-2011-0043 affects Kerberos in Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is use of weak hashing (CRC32) in service tickets, enabling local privilege escalation by a crafted service ticket. Public mitigations are documented in MS11-013, which addresses Kerberos-related elev...
MihanTools Script 1.3.3 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: MihanTools Script SQL Injection Vunerability Platform: php Date: 09.02.2011 Author: WHITEDEVIL Software Link: http://www.mihantools.ir/ Version: all version Tested on: Windows Sp2 Mail: email protected Dork: inurl:product.php?id...
CVE-2011-0977: Undefined Security Weakness
Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office...
Input validation
The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...
Input validation
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...
CVE-2011-0040
The CVE-2011-0040 vulnerability affects Microsoft Active Directory on Windows Server 2003 SP2, where the server mishandles an update request for a Service Principal Name (SPN). This can allow remote attackers to cause a denial of service or authentication outage via crafted SPN update requests th...
CVE-2011-0039: Improper Authentication
The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...
CVE-2011-0030: Undefined Security Weakness
The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...
PT-2011-2037
Name of the Vulnerable Software and Affected Versions Windows Server 2003 SP2 Description The issue arises from the server in Microsoft Active Directory not properly handling an update request for a service principal name SPN, allowing remote attackers to cause a denial of service, such as...
CVE-2011-0040: Improper Input Validation
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...
MihanTools Script 1.3.3 - SQL Injection
Exploit Title: MihanTools Script SQL Injection Vunerability Platform: php Date: 09.02.2011 Author: WHITEDEVIL Software Link: http://www.mihantools.ir/ Version: all version Tested on: Windows Sp2 Mail: [email protected] Dork: inurl:product.php?id= Powered by MihanTools Exploit:...
MyMarket 1.71 SQL Injection
Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ==================================================== http://www.site.com/mymarket/shopping/index.php?id= SQL Codes...
MyMarket 1.71 - index.php SQL Injection
MyMarket 1.71 - index.php SQL Injection Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...
PT-2011-2784
Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2002 SP3, 2003 SP3, and 2007 SP2 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 PowerPoint Viewer 2007 SP2...
MyMarket 1.71 - 'index.php' SQL Injection
Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ==================================================== http://www.site.com/mymarket/shopping/index.php?id= SQL Codes...