MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Oracle WebLogic Server Apache Connector POST buffer overflow

Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

beaweblogic-exec.txt

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

Bea Weblogic Apache Connector - Code Execution Denial of Service

Bea Weblogic Apache Connector - Code Execution Denial of Service // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector - Code Execution / Denial of Service

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

Microsoft Internet Explorer New ActiveX对象字符串串联内存破坏漏洞

BUGTRAQ ID: 30219 CNCAN ID：CNCAN-2008071510 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer new ActiveX对象处理存在内存破坏，远程攻击者可以利用漏洞对程序进行拒绝服务攻击，可能导致任意代码执行。 构建使用New ActiveX对象字符串的串联，当Internet Explorer解析时可导致应用程序崩溃，通过使用Javascript aka heapspray填充内存的方法可控制堆，导致以应用程序权限执行任意指令。 Microsoft...

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...

Microsoft SQL Server Memory Page Reuse Information Disclosure Vulnerability

Description Microsoft SQL Server is prone to an information-disclosure vulnerability caused by a memory-reallocation flaw. An attacker with operator access may leverage this issue to obtain potentially sensitive information that could aid in further attacks. Technologies Affected Microsoft Data...

Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the application. Given the nature of this...

Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service (953235)

Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service 953235 Published: June 10, 2008 | Updated: June 11, 2008 Version: 1.1 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Windows WINS服务本地权限提升漏洞（MS08-034）

BUGTRAQ ID: 29588 CVECAN ID: CVE-2008-1451 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的WINS服务没有充分验证特制WINS网络报文内的数据结构，可能允许本地攻击者使用提升的权限运行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。随后，攻击者可以安装程序；查看、更改或删除数据；或者创建新帐户。 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 Microsoft...

CVE-2008-1440

CVE-2008-1440 is a Windows DoS vulnerability in Pragmatic General Multicast (PGM) caused by improper validation of the PGM option length field. A remote attacker can trigger an infinite loop by sending a crafted PGM packet, rendering affected systems non-responsive and requiring a restart. Affect...

Microsoft Security Bulletin MS08-031 - Critical Cumulative Security Update for Internet Explorer (950759)

Microsoft Security Bulletin MS08-031 - Critical Cumulative Security Update for Internet Explorer 950759 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves one privately reported and one publicly disclosed vulnerability. The privately reported...

Microsoft Security Bulletin MS08-033 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

Microsoft Security Bulletin MS08-033 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution 951698 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft DirectX that could allo...