5543 matches found
CVE-2012-1868
Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application, aka "Win32k.sys Race Condition Vulnerability."...
PT-2012-3611
Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Description The issue is related to a race condition in the thread-creation implementation in the Windows kernel, specifically in win32k.sys. This allows local users to gain privileges via a crafted application. An...
CVE-2012-1868: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application, aka "Win32k.sys Race Condition Vulnerability."...
Joomla Joomsport SQL Injection / Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
XoopsCube Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
XoopsCube Module (FileManager) Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2012-2597
Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...
Directory traversal
Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...
CVE-2012-2598
The CVE-2012-2598 issue affects Siemens WinCC 7.0 SP3 (DiagAgent Web server). A buffer overflow in the DiagAgent Web server can be triggered by crafted input, allowing remote attackers to cause a denial of service (agent outage). The vulnerability is remotely exploitable over the network with no ...
CVE-2012-2596
The CVE-2012-2596 vulnerability affects Siemens WinCC 7.0 SP3 web applications, where the XPath/XML injection occurs because URL parameters do not properly filter special characters. This allows remote authenticated users to read or modify settings via a crafted URL. The issue is mitigated by app...
WordPress WP Easy Gallery 1.8 Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
CVE-2012-2597: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...
Audio Editor Master 5.4.1.217 - Denial of Service
Audio Editor Master 5.4.1.217 - Denial of Service !/usr/bin/python Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability software: Audio Editor Master version : 5.4.1.217 Tested on: Windows XP SP3 link: http://www.audioeditor.com Author: Onying @onyiing Blog:...
Microsoft Windows - OLE Object File Handling Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Microsoft Windows OLE Object File...
Sysax 5.60 - Create SSL Certificate Buffer Overflow
Sysax 5.60 - Create SSL Certificate Buffer Overflow Title: Sysax Security Settings Configure - Create Certificate - You will get an error, click OK and voila, code execution calc.exe shell32.ll jmp esp 7cb97475...
Sysax 5.60 - Create SSL Certificate Buffer Overflow
Title: Sysax Security Settings Configure - Create Certificate - You will get an error, click OK and voila, code execution calc.exe shell32.ll jmp esp 7cb97475...
TYPO3 4.7 Cross Site Request Forgery
Happy Milw0rm 1337 Day!!! Congratulations all h4x0rz 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Citrix Provisioning Services 5.6 SP1...
Citrix Provisioning Services 5.6 SP1 - Streamprocess Opcode 0x40020004 Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Citrix Provisioning Services 5.6 SP1...
Sorensoft Power Media 6.0 - Denial of Service
Sorensoft Power Media 6.0 - Denial of Service !/usr/bin/python Exploit Title: Sorensoft Power Media 6.0 out of memory software: Sorensoft power media version : 6.0 link: www.sorensoft.com Author: Onying @onyiing Website: otakku-udang.blogspot.com Tested on: Windows XP SP3 junk ="\x41"500 textfile...