CVE-2011-1279

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption...

CVE-2011-1278: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."...

CVE-2011-1277: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

CVE-2011-1275: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2011-1280: Exposure of Sensitive Information to an Unauthorized Actor

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

Polymedia Ltd. SQL injection Vulnerability

Exploit for php platform in category web applications ===================================== + Exploit Title : Polymedia Ltd. SQL injection Vulnerability + Author : CriminalCoder + Category : WebApps + d0rk : "Website by Polymedia Ltd." "inurl:php?=" + Vendor : http://www.polymedia-bg.com/ + Twitt...

Internet Explorer6 空指针访问 DOS(2011-6-15)

No description provided by source. html body script com = document.createElement‘li’; com.setAttribute‘value’, ‘huimaozi’; /script /body /html mshtml!CMarkup::FindMyListContainer: 7e41ea7f 8bff mov edi,edi 7e41ea81 55 push ebp 7e41ea82 8bec mov ebp,esp 7e41ea84 56 push esi 7e41ea85 8b7508 mov...

WinXP sp2/sp3 local to mention the right of 0day-vulnerability warning-the black bar safety net

Microsoft WinXP sp2/sp3 local system privilege escalation exploit Process: Added a new job with job ID = 1 Added a new job with job ID = 2 Added a new job with job ID = 3 Added a new job with job ID = 4 Added a new job with job ID = 5 Added a new job with job ID = 6 Added a new job with job ID = ...

MPlayer - .SAMI Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

MPlayer - .SAMI Subtitle File Buffer Overflow DEP Bypass Metasploit require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the...

MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the parsing of an overly long string found in a malicious SAMI subtitle...

Concept Medya Admin Auth ByPass

Exploit for php platform in category web applications Exploit Title: Concept Medya Admin Auth ByPass Date: 13 June 2011 Author: CriminalCoder beyz4de.wordpress.com Category: webapps Google dork: inurl:loginkontrol.asp Tested on: Windows Xp SP3 Home: spyroot.in & rootarea.com + Default admin panel...

Simple Web Server 1.2 - Directory Traversal

Simple Web Server 1.2 - Directory Traversal ------------------------------------------------------------------------ Software................Simple web-server 1.2 Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://www.storecalc.com...

Tele Data Contact Management Server - Directory Traversal

------------------------------------------------------------------------ Software................Tele Data Contact Management Server Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://teledata.qc.ca/tdcms/ Discovery Date..........6/1/201...

Tele Data Contact Management Server Directory Traversal

Exploit for windows platform in category web applications ------------------------------------------------------------------------ Software................Tele Data Contact Management Server Vulnerability...........Directory Traversal Threat Level............Serious 3/5...

7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow

$Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Magneto ICMP ActiveX 4.0.0.20 ICMPSendEchoRequest Remote Code Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow

Exploit for windows platform in category remote exploits $Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

7-Technologies IGSS 9 - IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)

$Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ActFax Server FTP - (Authenticated) Remote Buffer Overflow

ActFax Server FTP - Authenticated Remote Buffer Overflow !/usr/bin/python ----------------------------------------------------------------------------------- Exploit Title: ActFax Server FTP Remote BOF post auth Author: b33f - Ruben Boonen Software Link:...

KMPlayer 3.0.0.1440 Buffer Overflow

!/usr/bin/python The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass Downloaded from: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html 06 Jun 11 Cobbled together by dookie and ronin This exploit performs DEP bypass on WinXP SP3 with 2 different offsets. In our...