Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Quicktime/Itunes Multiple Remote Off By One Overflow Application:...

GoodTech SSH Server SFTP buffer overflow

Added: 11/28/2008 CVE: CVE-2008-4726 BID: 31879 OSVDB: 49249 Background GoodTech SSH Server is an SSH Server providing secure remote console, secure file transfer, and secure port forwarding capabilities for Windows platforms. Problem Buffer overflow vulnerabilities in GoodTech SSH Server allow...

GoodTech SSH Server SFTP buffer overflow

Added: 11/28/2008 CVE: CVE-2008-4726 BID: 31879 OSVDB: 49249 Background GoodTech SSH Server is an SSH Server providing secure remote console, secure file transfer, and secure port forwarding capabilities for Windows platforms. Problem Buffer overflow vulnerabilities in GoodTech SSH Server allow...

Apple iPhone Configuration Web Utility目录遍历漏洞

BUGTRAQ ID: 32412 iPhone Configuration Web Utility允许用户使用web浏览器创建、签名和发布配置文件。 Windows平台版本的iPhone Configuration Web Utility的Web接口存在目录遍历漏洞，远程攻击者可以通过向该接口提交恶意请求读取web root之外的任意只读文件。 Apple iPhone Configuration Web Utility 1.0 for Windows Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-5177

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Stack overflow

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Adobe Acrobat和Reader 8.1.2多个安全漏洞

BUGTRAQ ID: 32100 CVE ID：CVE-2008-4812 CVE-2008-4813 CVE-2008-4814 CVE-2008-4815 Adobe Acrobat和Reader是PDF文件格式处理程序。 Adobe Acrobat和Reader存在多个安全问题，远程攻击者可以利用漏洞执行任意代码或提升特权等攻击。 -当处理包含在PDF文档中的恶意JavaScript时存在缺陷，当建立Collab对象并在之上执行特定序列操作时，存在内存破坏可导致任意代码执行。...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

MS03-020 Microsoft Internet Explorer Object Type

This module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS03-020 Microsoft Internet Explorer Object...

mswingdi-dos.txt

MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes Authentication to Database Server is need...

HP OpenView Select Identity Connectors本地信息泄漏漏洞

BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...

Opera Web浏览器9.52版本修复多个安全漏洞

BUGTRAQ ID: 30768 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.52之前版本中存在多个安全漏洞，可能允许恶意用户执行欺骗和跨站脚本、泄露敏感信息或完全入侵用户系统。 1 当Opera作为协议处理器执行时存在错误，可能导致崩溃或执行任意代码。这个漏洞仅影响Windows平台上的Opera。 2 网页可以更改弹出窗口中打开的其他站点帧的地址，这可能导致向可信任站点帧中加载恶意内容。 3 处理自定义快捷方式和菜单命令时存在错误，允许以危险的参数执行应用程序。成功利用这个漏洞要求能够诱骗用户修改快捷方式或菜单文件。 4...

DEBIAN-CVE-2008-2430

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...

Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware,...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Update Protection against Apple Safari on Windows Platform Remote Code Execution Vulnerability (MS09-015)

A remote code execution vulnerability exists in Safari for Windows, a web browser developed by Apple. An attacker can exploit this issue to execute arbitrary code on a target system...

BigAnt Server 2.2 Buffer Overflow

This module exploits a stack buffer overflow in BigAnt Server 2.2. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

WordPress cat参数目录遍历漏洞

BUGTRAQ ID: 28845 WordPress是一款免费的论坛Blog系统。 在WordPress的wp-includes/theme.php文件的getcategorytemplate函数中，没有正确地过滤对index.php所传送的cat参数便将其用在了template-loader.php文件中，这可能允许攻击者通过目录遍历攻击包含本地资源的任意PHP文件。 成功利用这个漏洞要求将WordPress安装在了Windows平台上且攻击者拥有在受影响系统上存储PHP文件的权限。 WordPress 2.3.3 临时解决方法：...

Windows Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 148 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo...