Novell ZENworks Configuration Management Preboot Service Code Execution

Added: 06/17/2010 BID: 39111 OSVDB: 65361 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...

Rosoft Audio Converter 4.4.4 Buffer Overflow

Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link: http://www.rosoftengineering.com/freeware/RosoftAudioConverterFree.aspx Version: 4.4.4 Tested on: Windows XP SP3 / Windows 7 Home change shellcode for Windows 7 Instructions: create...

Rosoft Audio Converter 4.4.4 - Local Buffer Overflow

Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link: http://www.rosoftengineering.com/freeware/RosoftAudioConverterFree.aspx Version: 4.4.4 Tested on: Windows XP SP3 / Windows 7 Home change shellcode for Windows 7 Instructions: create...

Microsoft Help Center XSS and Command Execution

$Id: ms10xxxhelpctrxsscmdexec.rb 9518 2010-06-15 05:44:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RealPlayer - 'rmoc3260.dll' ActiveX Control Heap Corruption (Metasploit)

$Id: realplayerconsole.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)

$Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Power Tab Editor 1.7 Buffer Overflow

Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wife for her support Congratz to marko...

CP3 Studio PC 2.0 Denial Of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...

Yamamah 1.0 - SQL Injection

Yamamah 1.0 - SQL Injection Exploit Title: Yamamah 1.0 SQL Injection Vulnerability Date: 12/06/2010 Author: TheMaStEr Software Link: http://www.yamamah.org/ Version: 1.00 Tested on: Windows SP3 Dork: intext:"Powered By : Yamamah Version 1.00" Code : http://localhost/y/index.php?calbums=1' demo :...

Infront - SQL Injection

Infront - SQL Injection Exploit Title: Infront SQL Injection Vulnerability Date: 12-06-2010 Author: TheMaster Software Link: http://www.infront.com/ Version: N/A Tested on: Windows XP SP3 Author : TheMaster Dork : intext:Powered by Infront Type of attack : SQLi File : breakingnews.php Exploit Cod...

Infront - SQL Injection

Exploit Title: Infront SQL Injection Vulnerability Date: 12-06-2010 Author: TheMaster Software Link: http://www.infront.com/ Version: N/A Tested on: Windows XP SP3 Author : TheMaster Dork : intext:Powered by Infront Type of attack : SQLi File : breakingnews.php Exploit Code :...

CP3 Studio PC Version - Denial of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...

Yamamah 1.0 - SQL Injection

Exploit Title: Yamamah 1.0 SQL Injection Vulnerability Date: 12/06/2010 Author: TheMaStEr Software Link: http://www.yamamah.org/ Version: 1.00 Tested on: Windows SP3 Dork: intext:"Powered By : Yamamah Version 1.00" Code : http://localhost/y/index.php?calbums=1' demo :...

Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass

Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Microsoft Office COM对象验证远程代码执行漏洞（MS10-036）

BUGTRAQ ID: 40574 CVE ID: CVE-2010-1263 Microsoft Office是非常流行的办公软件套件。 Office中的组件在实例化对象时没有充分地验证COM对象，用户受骗打开了恶意的Excel、PowerPoint、Publisher、Visio 或Word文档就会导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office 2007 SP2 Microsoft Office 2007 SP1 Microsoft Office 2003 Service Pack 3 临时解决方法：...

Microsoft Help Center XSS and Command Execution

Help and Support Center is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing help documents directly via URLs by installing a protocol handler for the scheme "hcp". Due to an error in validation of input to hcp:// combined with a...

CVE-2010-1261

CVE-2010-1261 : A memory-corruption vulnerability in the Internet Explorer 8 Developer Toolbar (IE8) affects IE8 SP1/SP2/SP3. The connected MS knowledge base MS10-035 documents a remote code execution risk when processing a specially crafted page, due to uninitialized/deleted objects. Microsoft’s...

CVE-2010-1250

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...

CVE-2010-1246

CVE-2010-1246 is a confirmed vulnerability in Microsoft Excel 2002 SP3 where the RTD (Real Time Data) Future Record Type 0x813 parser mishandles a malformed topic string, causing a stack-based buffer overflow that could allow remote code execution. Public write-ups and advisories (e.g., SAINT adv...

Easy CD-DA Recorder 2007 Buffer Overflow

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...