Apple QuickTime 7.2/7.3 (Internet Explorer 7 / Firefox / Opera) - RTSP Response Universal

!/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista This exploit is completely "Universal" .... It has also been modded to work via url redirection ... Magic RETs work on...

Apple QuickTime 7.3 RTSP Response Universal Exploit (Vista / XP)

No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response Vista / XPSP2 Universal Bug discovered by Krystian Kloskowski h07 [email protected] Edited by muts - offensive-security.com http://www.offensive-security.com Tested on XP SP2 and Vista EN QuickTime/7.3...

IBM DB2多个特权提升漏洞

IBM DB2 Universal Database是一款商业性质的数据库系统。 IBM DB2 Universal Database存在多个安全问题，远程和本地攻击者可以利用漏洞提升特权。 目前没有详细漏洞细节提供。 IBM DB2 Universal Database for Windows 9.1 FixPak 3 IBM DB2 Universal Database for Windows 9.1 FixPack 2 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Solaris...

IBM DB2 Universal Database多个本地安全漏洞

BUGTRAQ ID: 25339 CVECAN ID: CVE-2007-4270,CVE-2007-4271,CVE-2007-4272,CVE-2007-4273,CVE-2007-4275,CVE-2007-4276 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2的多个工具实现上存在漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 IBM...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple File Creation Vulnerabilities

IBM DB2 Universal Database Multiple File Creation Vulnerabilities iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end database...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...

Savant Web Server 3.1 - GET Universal Remote Overflow

Savant Web Server 3.1 - GET Universal Remote Overflow !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp'...

Borland Interbase 2007 SP1 - Create-Request Remote Overflow

/ http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back...

esri-overflow.txt

/ Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow...

ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit ======================================================= / Dreatica-FXP crew ---------------------------------------- Target : ES...

gimp2214-overflow.txt

/ :: Kristian Hermansen :: Date: 20070509 Description: Gimp 2.2.14 RAS vuln, thanks to Marsu. This one is universal download and exec using call esp in libgimpcolor-2.0-0.dll. Vulnerable: Gimp 2.2.14 Tested: Gimp 2.2.14 on Windows Vista, XP, 2000 Compile: gcc -o netsniper-gimpu netsniper-gimpu.c...

IBM Tivoli Monitoring Express buffer overflow

Heap buffer overflow on oversized request to Universal Agent Primary Service TCP/10110, Monitoring Agent for Windows TCP/6014, Tivoli Enterprise Portal Server TCP/14206...

IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Monitoring Express. Authentication is not required to exploit this vulnerability. The specific flaws exist in the Tivoli Universal Agent Primary Service TCP 10110, Monitoring Agent for...

MS07-019: Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)

The remote version of Windows contains a flaw in the http request handler the Plug and Play service that could allow an attacker to execute arbitrary code on the remote host with the service privileges. Tenable Network Security, Inc. include"compat.inc"; if description scriptid25022;...

Microsoft Windows Universal PnP memory corruption

Memory corruption during TCP/2869 and UDP/1900 request processing...

Microsoft Windows - Animated Cursor .ani Universal Generator

Microsoft Windows - Animated Cursor .ani Universal Generator -------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz...

Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries

Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities

IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability

IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...

Improvements to help protect against Cross-Site Scripting attacks — Mozilla

Firefox 2.0.0.2 and 1.5.0.10 contain several small changes that will make it easier for sites to protect their visitors against Cross-Site Scripting XSS attacks. Invalid trailing characters in HTML tag attributes The Mozilla parser formerly ignored invalid trailing characters in HTML tag attribut...