BearShare 6 ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BearShare 6...

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mdaemon 8.0....

CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightStor...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Yahoo!...

Joomla 1.5.12 RCE via TinyMCE upload vulnerability

No description provided by source. ?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at nibblesec.org http://blog.nibblesec.or...

FtpXQ authenticated remote Dos

Exploit for unknown platform in category dos / poc ============================== FtpXQ authenticated remote Dos ============================== Title: FtpXQ authenticated remote Dos CVE-ID: OSVDB-ID: Author: Marc Doudiet Published: 2009-11-17 Verified: yes view source print? !/usr/bin/python...

Icarus 2.0 (.pgn File) Universal Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ==================================================================== Icarus 2.0 .pgn File Universal Local Buffer Overflow Exploit SEH ==================================================================== Title: Icarus 2.0 .pgn File Universal...

Icarus 2.0 - .pgn Universal Local Buffer Overflow Exploit SEH

Icarus 2.0 .pgn File Universal Local Buffer Overflow Exploit SEH. Local exploit for windows platform !/user/bin/perl Icarus 2.0 .PGn FileUniversal Local BOF SEH tested on win SP2 Author: germayax & D3v!LFUCK3R Download :http://www.randomsoftware.com/pub/icarus.exe GreTz 2 :his0k4 , EddyBAck0o , T...

FtpXQ authenticated remote Dos

No description provided by source. !/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found...

FtpXQ 3.0 - (Authenticated) Remote Denial of Service

!/usr/bin/python banner= "\r\n" " Exploit Title: FtpXQ authenticated remote Dos " " trial on http://www.datawizard.net/Products/FtpXQ/Setup.EXE Version 3.0.1 \r\n" " Tested on XP sp2 english" " Needs write access -- vuln on MKD command\r\n" " Vulnerability found by Marc Doudiet\r\n" " For...

Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow

Hewlett-Packard HP Power Manager Administration Power Manager Administration - Universal Buffer Overflow !/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T...

EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF...

CVE-2009-2512: Improper Control of Generation of Code

The Web Services on Devices API WSDAPI in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted 1 message or 2 response, aka "Web Services on Devices API Memory...

XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)

Exploit Title: XM Easy Personal FTP Server LIST DoS Meta Date: 4/17/2010 Author: Jeremiah Talamantes Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP, SP2 CVE : N/A Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.p This...

SUSE Linux 'scsi_discovery tool'不安全临时文件建立漏洞

Bugraq ID: 36887 CVE ID：CVE-2009-1297 SUSE Linux是一款基于linux内核的发行版本。 SUSE Linux 'scsidiscovery tool'工具不安全建立临时文件，本地攻击者可以利用漏洞执行符号链接攻击覆盖任意攻击者指定的文件，造成拒绝服务攻击。 S.u.S.E. SLE SDK 10 SP2 S.u.S.E. SLE 11 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 用户可联系供应商获得最新版本：...

Joomla 1.5.12 Code Execution Via TinyMCE

?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at nibblesec.org http://blog.nibblesec.org / / daath@shaytan:$ php...

Joomla 1.5.12 Remote Code Execution via TinyMCE File Upload Vulnerability

No description provided by source. ?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at nibblesec.org http://blog.nibblesec.or...

Symantec ConsoleUtilities - ActiveX Buffer Overflow (Metasploit)

Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. require 'msf/core' class Metasploit3 'Symantec ConsoleUtilities ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack overflow in Symantecs ConsoleUtilities...

Novell NetWare LSASS CIFS.NLM Driver Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...

{PRL} Eureka Mail client BoF

Application: Eureka Mail client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's Special Thanks to: M Jeremy Brown 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Sick of...