AVCON H323Call - Local Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON H323Call Buffer Overflow Date: 5/9/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Versions: 4.6.8.7 | 4.6.4.0 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Download: http://meeting.bjhr.gov.cn/avcon/avcon.exe...

Microsoft Paint Integer Overflow Vulnerability (DoS) MS10-005

Exploit for windows platform in category dos / poc ============================================================= Microsoft Paint Integer Overflow Vulnerability DoS MS10-005 ============================================================= Date: 2010-05-04 Version: 5.1.2600.2180 Tested on: Windows XP...

Microsoft Paint - Integer Overflow (Denial of Service) (MS10-005)

Date: 2010-05-04 Version: 5.1.2600.2180 Tested on: Windows XP SP2 Exploit-DB Notes: Tested under 32-bit Windows XP SP3 ENG, MS Paint crashes. However, please note this exploit might not actually be related to MS10-005. Thanks to Yaniv Miron. !/usr/bin/perl $PoC =...

TFTPGUI Long Transport Mode Overflow

Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4.5 Tested on: Windows XP, SP2 En CVE : N...

Burning Board Lite 1.0.2 - Arbitrary File Upload

Burning Board Lite 1.0.2 - Arbitrary File Upload ======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Power...

GuppY v4.5.18 Blind SQL/XPath injection Vulnerability

Exploit for php platform in category web applications ===================================================== GuppY v4.5.18 Blind SQL/XPath injection Vulnerability =====================================================...

TFTPGUI - Long Transport Mode Overflow

Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4.5 Tested on: Windows XP, SP2 En CVE : N...

GuppY 4.5.18 - Blind SQL Injection XPath Injection

GuppY 4.5.18 - Blind SQL Injection XPath Injection ======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © ...

Blog Pixel Motion Backup Disclosure

======================================================================================== | Title : Blog Pixel Motion = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Ce blog a été mis à disposition par Pixel Motion | Tested on: windows SP2...

TR Forum 1.5 Multi Vulnerability

Exploit for php platform in category web applications ================================ TR Forum 1.5 Multi Vulnerability ================================ ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author :...

TR Forum 1.5 - Multiple Vulnerabilities

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

Zyke CMS 1.0 - Arbitrary File Upload

Zyke CMS 1.0 - Arbitrary File Upload ======================================================================================== | Title : Zyke CMS V1.0 Remote File Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered by ZykeCMS...

Clipak Shell Upload

======================================================================================== | Title : clipak Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug :...

Zyke CMS 1.0 Shell Upload / Administrative Bypass

======================================================================================== | Title : Zyke CMS V1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered by ZykeCMS 2010 | Tested on: windows SP2 Français V.Pnx2 2.0...

Avast! 4.7 - aavmker4.sys Local Privilege Escalation

Avast! 4.7 - aavmker4.sys Local Privilege Escalation !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti ...

Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

!/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 17/04/2010 Tested on WinXPSP2/SP3 englis...

Kasseler CMS 2.0.5 - Bypass / Download Backup

======================================================================================== | Title : kasseler cms 2.0.5 = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright ©2007-2009 by Kasseler CMS. All rights reserved. | Tested on:...

Windows win32k.sys驱动SfnINSTRING本地内核拒绝服务漏洞

BUGTRAQ ID: 39631 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所使用的Win32k.sys驱动在DispatchMessage时，会最后调用到xxxDefWindowProc。这个函数在处理某些消息时，会调用gapfnScSendMessage这个函数表中的函数来处理。2000/XP/2003下在处理0x18d号消息时，会有一个名为SfnINSTRING的函数，当lParam不为空时该函数直接认为lParam是内存指针，并直接从地址中取出数据。尽管函数内使用了SEH，但是只要传递错误的内核地址，仍然会引发系统崩溃。...

Alegro 1.2.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Alegro 1.2.1 SQL Injection Vulnerability ======================================== ======================================================================================== | Title : Alegro 1.2.1 SQL...

Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference

This module triggers a NULL pointer dereference in the SRV2.SYS kernel driver when processing an SMB2 logoff request before a session has been correctly negotiated, resulting in a BSOD. Effecting Vista SP1/SP2 And possibly Server 2008 SP1/SP2, the flaw was resolved with MS09-050. This module...