SYMSA-2007-015

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-015 Advisory Title: Perforce P4Web Denial Of Service through resource starvation Author: Oliver Karow / [email protected] Release Date: 1...

aquick-winosx.txt

Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...

ms07-055-pl.txt

!/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBase address and PE Win32 header is started at 0x00400000 in...

Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)

No description provided by source. !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz grabarz at grabarz.info Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584...

Microsoft Internet Explorer - TIFTIFF Code Execution (MS07-055)

Microsoft Internet Explorer - TIFTIFF Code Execution MS07-055 !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBa...

Microsoft Internet Explorer - TIF/TIFF Code Execution (MS07-055)

!/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBase address and PE Win32 header is started at 0x00400000 in...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

Mono System.Web StaticFileHandler.cs源码泄露漏洞

BUGTRAQ ID: 26166 CVECAN ID: CVE-2007-5473 Mono是基于.NET框架的开源开发平台，允许开发人员构建Linux和跨平台的应用。 运行在Windows平台上的Mono中StaticFileHandler.cs文件没有正确地处理某些用户请求，可能导致源码泄露。 如果请求中所使用的文件名以空格或句号结束的话，Win32子系统就无法正确地处理这样的文件名，会忽略拖尾字符，允许调用的应用程序打开磁盘上的文件，即使该文件的名称不包含有请求中所使用的拖尾字符。发送上述请求就会导致XSP返回所请求页面的源码。 Mono 1.x...

PHP <= 5.2.0 (php_iisfunc.dll) Local Buffer Overflow PoC (win32)

No description provided by source. ?php // ================================================================================== // // phpiisfunc.dll PHP = 5.2.0 win32 Buffer Overflow PoC // // Discovery: boecke [email protected] // Risk: Local Buffer Overflow Medium - High Risk // Notes: Various...

PHP <= 5.2.0 (php_iisfunc.dll) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ================================================================ PHP // Risk: Local Buffer Overflow Medium - High Risk // Notes: Various other functions are exploitable, all of which convert the // string arguments to unicode. // // extern "C"...

SIDVault LDAP Server Remote Buffer Overflow

SIDVault LDAP Server Remote Buffer Overflow =========================================== Product Description: SIDVault LDAP Server for Win32 and GNU/Linux SIDVault is a Simple Integration Database, allowing easy management and installations with high performance LDAP v3 server. It supports any...

PHP &lt;= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

No description provided by source. ?php // ================================================================================== // // phpwin32sti.dll PHP = 5.2.0 win32 Buffer Overflow // // x Discovery: boecke [email protected] // x Risk: Local Buffer Overflow Medium - High Risk //...

PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ============================================================= PHP // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre,...

WengoPhone SIP Soft Phone畸形报文拒绝服务漏洞

WengoPhone SIP Soft Phone是一款基于SIP的VoIP电话程序。 WengoPhone SIP Soft Phone实现存在消息验证检查问题，远程攻击者可以利用漏洞进行拒绝服务攻击，使应用程序崩溃。 问题是存在于SIP客户端组件不正确处理SIP报文，MESSAGE处理没有"Content-Type"字段的畸形报文可导致应用程序崩溃。 Wengo WengoPhone 2.1 目前没有解决方案提供： http://www.wengophone.com/ /main.cpp/ include stdio.h include string using namespace...

securityreporter-traverse.txt

SECURITYREPORTER - AUTHENTICATION BYPASS AND DIRECTORY TRAVERSAL VULNERABILITY Product: SecurityReporter Version: 4.6.3 Build Date: 04/20/2007 Platform: Win32 Vendor: Secure Computing www.securecomputing.com Product Description ------------------- "SecurityReporter is a security event analysis an...

[Full-disclosure] Secure Computing - Security Reporter Auth Bypass and Directory Traversal Vulnerability

SECURITYREPORTER - AUTHENTICATION BYPASS AND DIRECTORY TRAVERSAL VULNERABILITY Product: SecurityReporter Version: 4.6.3 Build Date: 04/20/2007 Platform: Win32 Vendor: Secure Computing www.securecomputing.com Product Description ------------------- "SecurityReporter is a security event analysis an...

CVE-2007-3806

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initializati...

CVE-2007-3806

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initializati...

CVE-2007-3806

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initializati...