NJStar Communicator 3.00 MiniSMTP Server Remote Exploit

No description provided by source. Exploit Title: NJStar Communicator 3.00 MiniSMTP Server Remote Exploit Date: 10/31/2011 Author: Dillon Beresford Twitter: https://twitter.com/!/D1N Software Link: http://www.njstar.com/download/njcom.exe Version: 3.00 and prior Build: 11818 and prior Tested on:...

Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Symantec Endpoint Protection Manager - Remote Command Execution Exploit

No description provided by source. import argparse import httplib Exploit Title: Symantec Endpoint Protection Manager Remote Command Execution Exploit Author: Chris Graham @cgrahamseven CVE: CVE-2013-5014, CVE-2013-5015 Date: February 22, 2014 Vendor Homepage:...

FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (1)

No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...

HP OmniInet.exe Opcode 20 Buffer Overflow

No description provided by source. $Id: hpomniinet4.rb 13096 2011-07-04 22:33:47Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow

No description provided by source. $Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...

Ability Mail Server 2013 - Password Reset CSRF from Stored XSS (Web UI)

No description provided by source. On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a user named, victim, with a...

HP Intelligent Management Center UAM Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

otrs open technology real services 3.1.4 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: OTRS Open Technology Real Services Version: 3.1.4 Windows Vendor Site: http://www.otrs.com/en/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...

smartermail free 9.2 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: SmarterMail Version: Free 9.2 Vendor Site: http://www.smartertools.com Software Download: http://smartertools.com/smartermail/mail-server-software.aspx Timeline: 29 May 2012: Vulnerability...

Islam Sound IV2 - (details.php) Remote SQL Injection

No description provided by source. Lab : ZxH-Lab's Locate : Jordan - Amman City Exploit Title : Islam Sound IV2 details.php Remote SQL Injection Date : 2-2-2011 Author : ZxH-Labs HomeScript : http://www.emides.com/ Version : 2.0 Tested On : Windows Server 2003 IIS...

winwebmail server 3.8.1.6 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: WinWebMail Server Version: 3.8.1.6 Vendor Site: http://www.winwebmail.net Software Download: http://www.winwebmail.net/email-server-download.html Timeline: 29 May 2012: Vulnerability reported...

SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX - RFMSsvs!JShellExecuteEx RCE

No description provided by source. SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control RFMSsvs!JShellExecuteEx Remote Command Execution Tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft Windows XP sp3 Microsoft Windows 7 Internet Explorer 8 Software description:...

Microsoft Internet Explorer 5.0.1 OuterHTML Redirection Handling Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18682/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the...

MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow

No description provided by source. MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast,...

Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Vulnerability

No description provided by source. Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote File Creation / Overwrite Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url of a test version:...

Google Chrome Denial of Service (DoS)

No description provided by source. / GGGGGG\ GG GG\ GG / | aaaaaa\ rrrrrr\ aaaaaa\ gggggg\ eeeeee\ GG |GGGG\ \aa\ rr rr\ \aa\ gg gg\ ee ee\ GG |\GG | aaaaaaa |rr | |aaaaaaa |gg / gg |eeeeeeee | GG | GG |aa aa |rr | aa aa |gg | gg |ee | \GGGGGG |\aaaaaaa |rr | \aaaaaaa |\ggggggg |\eeeeeee\ / ||...

Kolibri 2.0 - Buffer Overflow RET + SEH exploit (HEAD)

No description provided by source. !/usr/bin/env python / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader gsog2009 a7 homtail d0t com Sro Debug Contact:...

HP NNM CGI webappmon.exe execvp Buffer Overflow

No description provided by source. $Id: hpnnmwebappmonexecvp.rb 12086 2011-03-23 03:38:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

HP OpenView NNM nnmRptConfig nameParams Buffer Overflow

No description provided by source. $Id: hpnnmnnmrptconfignameparams.rb 12085 2011-03-23 03:37:18Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...