MS Windows IIS Unicode Remote Transversal Bug

No description provided by source. / iisex iis exploit - nost's idea v2 -------------------------------------- Okay.. the first piece of code was not really finished. So, i apologize to everybody.. by incubus [email protected] grtz to: Bio, nos, zoa, reg and vor... who else would stay up at nig...

CVE-2006-0765

GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...

Design/Logic Flaw

ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...

Design/Logic Flaw

GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...

CVE-2006-0765

CVE-2006-0765 describes a GUI display truncation in ICQ 2003a/2003b and ICQ Lite 4.0/4.1 on Windows, where a filename that is all uppercase and of a specific length causes the malicious file extension to be truncated in the UI, allowing user-assisted remote attackers to bypass security warnings a...

CVE-2006-0766

ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...

Code injection

The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when 1 it establishes an association with a station in ad hoc aka peer-to-peer mode or 2 a station in ad hoc mode establishes an association with it, which...

Mining access to VNC secure tunneling-vulnerability warning-the black bar safety net

I believe many readers like to use Telnet on the server for remote access, use the Telnet server and the client may also vary, may be Microsoft's Terminal Services or PCAnywhere, etc., I believe most of the users still prefer to VNC this free lunch. But you use VNC at the same time there is no...

Syskey Double encryption method and crack cheats-exploits warning-the black bar safety net

Many of my friends may know that in Windows 2 0 0 0 and Windows XP you can use the syskey command to the system is encrypted using Syskey Double encryption system generally speaking it should be relatively safe, however some of the so-called hack or find a hack Syskey dual encryption method, the...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

winrar-3.50-eng.txt

/ local exploit for winrar include include int main int argc, char argv long sysaddr = 0x77C18044; // winxp sp0 targets... long exitaddr = 0x77C27ADC; long cmdaddr = 0x77C01335; char buf3000; char cmd3000; if argc \n\n"; exit0; memsetbuf, 0x00, 3000; memsetcmd, 0x00, 3000; memsetbuf, 0x55, 516;...

CVE-2002-1940

CVE-2002-1940 affects the LCC-Win32 3.2 compiler running on Windows 95/98/ME, where memory after the import table can leak previously used data, potentially exposing sensitive information. Root cause involves memory handling in that environment; Red Hat/Red Hat-like advisories and other sources c...

Microsoft Windows - HTA Script Execution (MS05-016)

Microsoft Windows - HTA Script Execution MS05-016 / Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You nee...

SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)

Exploit for unknown platform in category remote exploits =============================================================== SHOUTcast 1.9.4 File Request Format String Remote Exploit win =============================================================== / Object: PoC for Nullsoft SHOUTcast 1.9.4 File...

MS05-015: Vulnerability in the Hyperlink Object Library may allow code execution (888113)

The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library that can be abused to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it. C Tenable Netwo...

MS Windows Improper Token Validation Local Exploit (working)

Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...

CVE-2004-2454

aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from 1 hotlog.htm and 2 config.xml...

Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)

/ HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2 Copyright c 2004 houseofdabus. MS04-031 NetDDE buffer overflow vulnerability PoC .:: houseofdabus ::. special unstable version --------------------------------------------------------------------- Description: A remote code execution...

Windows LoadImage integer overflow

Integer overflow on bitmap size calculation...

IPD (Integrity Protection Driver) - Denial of Service

IPD Integrity Protection Driver - Denial of Service / ipd-dos.c Copyright c 2002-2004 By Next Generation Security S.L. All rights reserved Compiles with: cl ipd-dos.c Madrid, August 2004 / include define MYNULL 0x01 typedef DWORD zwopensectionTYPEDWORD Handle, DWORD mask, DWORD oa; int mainint...