8161 matches found
Apple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universal
Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...
Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit (win/osx)
Exploit for multiple platform in category remote exploits ================================================================= Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit win/osx ================================================================= Copyright C 2007 Subreption LLC. All rights...
aquick-universal.txt
!/usr/bin/python http://www.offensive-security.com This exploit is completely "Universal" .... It has also been modded to work via url redirection ... Magic RETs work on 7.3,7.2,XPSP2,Vista,IE7,Firefox,Opera.... re-edited by muts and javaguru1999 to spite Symantec...
Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit (IE7/FF/Opera)
Exploit for unknown platform in category remote exploits ====================================================================== Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit IE7/FF/Opera ====================================================================== !/usr/bin/python...
Apple QuickTime 7.2/7.3 (Internet Explorer 7 / Firefox / Opera) - RTSP Response Universal
!/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista This exploit is completely "Universal" .... It has also been modded to work via url redirection ... Magic RETs work on...
Apple QuickTime 7.3 RTSP Response Universal Exploit (Vista / XP)
No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response Vista / XPSP2 Universal Bug discovered by Krystian Kloskowski h07 [email protected] Edited by muts - offensive-security.com http://www.offensive-security.com Tested on XP SP2 and Vista EN QuickTime/7.3...
IBM DB2多个特权提升漏洞
IBM DB2 Universal Database是一款商业性质的数据库系统。 IBM DB2 Universal Database存在多个安全问题，远程和本地攻击者可以利用漏洞提升特权。 目前没有详细漏洞细节提供。 IBM DB2 Universal Database for Windows 9.1 FixPak 3 IBM DB2 Universal Database for Windows 9.1 FixPack 2 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Solaris...
IBM DB2 Universal Database多个本地安全漏洞
BUGTRAQ ID: 25339 CVECAN ID: CVE-2007-4270,CVE-2007-4271,CVE-2007-4272,CVE-2007-4273,CVE-2007-4275,CVE-2007-4276 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2的多个工具实现上存在漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 IBM...
iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple File Creation Vulnerabilities
IBM DB2 Universal Database Multiple File Creation Vulnerabilities iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end database...
Savant 3.1 Get Request Remote Overflow Exploit (Universal)
No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...
Savant Web Server 3.1 - GET Universal Remote Overflow
Savant Web Server 3.1 - GET Universal Remote Overflow !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp'...
Borland Interbase 2007 SP1 - Create-Request Remote Overflow
/ http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back...
esri-overflow.txt
/ Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow...
ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ======================================================= ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit ======================================================= / Dreatica-FXP crew ---------------------------------------- Target : ES...
gimp2214-overflow.txt
/ :: Kristian Hermansen :: Date: 20070509 Description: Gimp 2.2.14 RAS vuln, thanks to Marsu. This one is universal download and exec using call esp in libgimpcolor-2.0-0.dll. Vulnerable: Gimp 2.2.14 Tested: Gimp 2.2.14 on Windows Vista, XP, 2000 Compile: gcc -o netsniper-gimpu netsniper-gimpu.c...
IBM Tivoli Monitoring Express buffer overflow
Heap buffer overflow on oversized request to Universal Agent Primary Service TCP/10110, Monitoring Agent for Windows TCP/6014, Tivoli Enterprise Portal Server TCP/14206...
IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Monitoring Express. Authentication is not required to exploit this vulnerability. The specific flaws exist in the Tivoli Universal Agent Primary Service TCP 10110, Monitoring Agent for...
CVE-2007-1204: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...
MS07-019: Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)
The remote version of Windows contains a flaw in the http request handler the Plug and Play service that could allow an attacker to execute arbitrary code on the remote host with the service privileges. Tenable Network Security, Inc. include"compat.inc"; if description scriptid25022;...