4849 matches found
CVE-2008-4252: Undefined Security Weakness
The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of...
CVE-2008-4253: Undefined Security Weakness
The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code v...
CVE-2008-4256: Undefined Security Weakness
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted...
RadAsm <= 2.2.1.4 (.RAP File) WindowCallProcA Pointer Hijack Exploit
No description provided by source. !/usr/bin/perl RadAsm =2.2.1.4 WindowCallProcA Pointer Hijack Exploit Tested on Windows XP SP2 FR,perhaps work as will underWindows XP SP3. Long buffer passed to the program by Group key in the project file ".rap files" can lead to Overwrite the pointer of...
RadAsm <= 2.2.1.5 (.RAP File) WindowCallProcA Pointer Hijack Exploit
Exploit for unknown platform in category local exploits ==================================================================== RadAsm Building poc.rap..\n"; print "- poc.rap Created have unf :\n"; win32exec - EXITFUNC=process CMD=calc.exe Size=351 Encoder=PexAlphaNum http://metasploit.com my...
tvp-crash.txt
Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any supplied file for a reconized header even if the...
Total Video Player (vcen.dll) Remote off by one Crash Exploit
No description provided by source. Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "? TVP type= ?" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any...
Total Video Player (vcen.dll) Remote off by one Crash Exploit
Hi, Total Video Player vcen.dll Remote off by one Crash Exploit NickName : Cn4phux Email : Cn4phuxatgmail.com Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "? TVP type= ?" tag fail to handle long strings, which can lead to ...
Google Chrome MetaCharacter URI Obfuscation Vulnerability
Advisory: Google Chrome MetaCharacter URI Obfuscation Vulnerability. Version Affected: All Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is vulnerable to URI Obfuscation vulnerability. An attacker can easily perform malicious redirection by manipulating the...
Total Video Player - vcen.dll Remote Off-by-One Crash
Total Video Player - vcen.dll Remote Off-by-One Crash Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse an...
Total Video Player - 'vcen.dll' Remote Off-by-One Crash
Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any supplied file for a reconized header even if the...
MS Windows Server Service Code Execution Exploit (MS08-0 6 7) (2k/2k3)-the exploit-warning-the black bar safety net
!/ usr/bin/env python MS08-0 6 7 Exploit by Debasis Mohanty aka Tr0y/nopsled www.hackingspirits.com www.coffeeandsecurity.com Email: d3basis. m0hanty @ gmail.com import struct import sys from threading import Thread Thread is imported incase you would like to modify the src to run against multipl...
CVE-2008-5112: Exposure of Sensitive Information to an Unauthorized Actor
The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...
ms08067-2k2k3.txt
!/usr/bin/env python MS08-067 Exploit by Debasis Mohanty aka Tr0y/nopsled www.hackingspirits.com www.coffeeandsecurity.com Email: d3basis.m0hanty @ gmail.com import struct import sys from threading import Thread Thread is imported incase you would like to modify the src to run against multiple...
VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)
Sub Boom buff = String1006, "A" target.OpenPDF buff, 1, 1 End Sub milw0rm.com 2008-11-15...
Microsoft Active Directory LDAP Server - Username Enumeration
Microsoft Active Directory LDAP Server - Username Enumeration source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...
CVE-2008-4037
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential...
MS08-069: Description of the security update for XML Core Services 4.0: November 11, 2008
None None...
