CVE-2008-2248

Cross-site scripting XSS vulnerability in Outlook Web Access OWA for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247...

CVE-2008-2247

CVE-2008-2247 is a cross-site scripting vulnerability in Outlook Web Access (OWA) for Microsoft Exchange Server 2003 SP2. The flaw arises from insufficient validation of e-mail fields when opening mail within an OWA client, allowing an attacker to inject arbitrary script and potentially elevate p...

OllyDBG v1.10 and ImpREC v1.7f (export name) BOF PoC

Exploit for unknown platform in category local exploits ==================================================== OllyDBG v1.10 and ImpREC v1.7f export name BOF PoC ==================================================== ;-------------------------------------------------------------------------; ; OllyDB...

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Jus...

CVE-2008-0106: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement...

Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day

Exploit for unknown platform in category local exploits ================================================================ Download Accelerator Plus - DAP 8.x m3u Local BOF Exploit 0day ================================================================ !/usr/bin/python Download Accelerator Plus - DAP...

CVE-2008-1454: Undefined Security Weakness

Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache...

CVE-2008-2247: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Outlook Web Access OWA for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified e-mail fields, a different vulnerability than CVE-2008-2248...

CVE-2008-2248: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Outlook Web Access OWA for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247...

Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit

No description provided by source. / Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit Bug discoveried by iDEFENSE Security http://www.idefense.com Exploit coded By ATmaCA Copyright ?2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...

XnView 1.93.6 - .taac Local Buffer Overflow

XnView 1.93.6 - .taac Local Buffer Overflow include include / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow ...

XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC

Exploit for unknown platform in category local exploits ================================================================= XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC ================================================================= include include / XnView 1.93.6 for Windows...

HP StorageWorks Storage Mirroring DoubleTake.exe encoded authentication overflow

Added: 06/16/2008 CVE: CVE-2008-1661 OSVDB: 45924 Background HP StorageWorks is a virtualized storage solution for mid-sized customers. Problem A buffer overflow vulnerability in the DoubleTake.exe process allows remote attackers to execute arbitrary commands by sending a long, specially crafted...

Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）

BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

Microsoft Windows蓝牙栈远程代码执行漏洞（MS08-030）

BUGTRAQ ID: 29522 CVECAN ID: CVE-2008-1453 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的蓝牙栈没有正确地处理服务描述请求，如果远程攻击者以很快地速度向有漏洞的系统发送了大量特制的SDP报文的话，就可能以提升的权限运行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除日期；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...

CVE-2008-1440: Improper Validation of Specified Quantity in Input

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

CVE-2008-1451: Improper Input Validation

The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."...

MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass

No description provided by source. Orginal Advisory and exploit by cyberflash Vengy Circumvent Windows XP SP2 security features using execCommand 'SaveAs' function! Demonstration: Notice that you don't receive any warning messages such as:...