CVE-2008-6722: Exposure of Sensitive Information to an Unauthorized Actor

Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to...

CVE-2009-0093: Improper Input Validation

Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD feature, and conduct...

CVE-2009-0094: Undefined Security Weakness

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

CVE-2009-0083: Improper Input Validation

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."...

Free Download Manager <= 3.0 Build 844 .torrent BOF Exploit

No description provided by source. !/usr/bin/perl Free Download Manager = 3.0 Build 844 .torrent BOF Exploit ----------------------------------------------------------- Exploit by SkD [email protected] Vendors URL = www.freedownloadmanager.org Download FDM 3.0 Build 844 =...

Free Download Manager 3.0 Build 844 - .torrent Local Buffer Overflow

Free Download Manager 3.0 Build 844 - .torrent Local Buffer Overflow !/usr/bin/perl Free Download Manager = 3.0 Build 844 .torrent BOF Exploit ----------------------------------------------------------- Exploit by SkD [email protected] Vendors URL = www.freedownloadmanager.org Download FDM 3.0...

WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit

No description provided by source. !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website...

WFTPD Explorer Pro 1.0 Heap Overflow

!/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website = http://www.wftpd.com Tested on...

WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits =================================================== WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit =================================================== !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

WFTPD Explorer Pro 1.0 - Remote Heap Overflow !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

!/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website = http://www.wftpd.com Tested on...

Destiny Media Player 1.61 (.lst File) Local Stack Overflow Exploit

print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploitn" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print " Tested on : Windows 2000 SP4 Polish" print " Greetings to :...

Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #5

Exploit for unknown platform in category local exploits ===================================================================== Destiny Media Player 1.61 lst File Local Buffer Overflow Exploit 5 ===================================================================== print...

Microsoft SQL Server Heap Overflow Exploit

% // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change allows multiple shots : // // You need a valid SQL account,...

Microsoft SQL Server sp_replwritetovarbin() Heap Overflow Exploit (0day)

No description provided by source. html % // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change allows multiple shot...

Microsoft SQL Server - sp_replwritetovarbin() Heap Overflow

Microsoft SQL Server - spreplwritetovarbin Heap Overflow % // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change...

Microsoft SQL Server - 'sp_replwritetovarbin()' Heap Overflow

% // ksOSe 12/17/2008 // Microsoft SQL Server "spreplwritetovarbin" Heap Overflow // Tested on Win2k SP4 with MSSQL 2000on one box only!. // Shellcode is a slightly modified metasploit reverse shellon 10.10.10.1 port 4445, // the change allows multiple shots : // // You need a valid SQL account,...

CVE-2008-5112: Exposure of Sensitive Information to an Unauthorized Actor

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...

Microsoft Active Directory LDAP Server - Username Enumeration

Microsoft Active Directory LDAP Server - Username Enumeration source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

CVE-2008-4037

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential...