Win32 XP SP3 ShellExecuteA shellcode

No description provided by source. ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will attempt to delete the Zone.Identifier ADS it's a ; trick Microsoft uses to warn you about an exe when you try to run it, ; and then run the file using the...

iSupport 1.8 XSS / Local File Inclusion

--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

RM Downloader 3.0.2.1(.M3U File) Stack Overflow exploit

Exploit for unknown platform in category local exploits ======================================================= RM Downloader 3.0.2.1.M3U File Stack Overflow exploit ======================================================= Title: RM Downloader 3.0.2.1.M3U File Stack Overflow exploit CVE-ID:...

RM Downloader 3.0.2.1 - .m3u Local Stack Overflow

RM Downloader 3.0.2.1 - .m3u Local Stack Overflow !/usr/bin/perl RM Downloader 3.0.2.1.M3U File Stack Overflow exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/downloads/RMDownloader.exe Tested : Windows XP SP2 En Thanks to exploit-db,packetstormsecurity and all security folks...

Internet Explorer Request Header Cross-Domain Information Disclosure (MS08-031; CVE-2008-1544)

An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. The vulnerability is due to an error in Internet Explorer that incorrectly parses a specially crafted request header, allowing a violation of the same origin policy. To...

OpenJDK zoneinfo file existence information leak (6824265)

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Code to mitigate IE STYLE zero-day

/ This code is for a DLL that loads into Internet Explorer as a BHO and modifies MSHTML.DLL in memory to render attempts to exploit this new IE vulnerability inert. It does that by forcing a "controlled crash" at a high address, instead of letting EIP reach an MSHTML-dependent address that could...

ActiveBids Blind SQL Injection

ActiveBids default.asp Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.activewebsoftwares.com Demo : http://server/default.asp?catid=39+and+1=1 true http://server/default.asp?catid=39+and+1=0 false :: test ::...

Active Trade 2.0 Blind SQL Injection

Active Trade 2.0default.asp Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.activewebsoftwares.com Demo : http://server/default.asp?catid=39+and+1=1 true http://server/default.asp?catid=39+and+1=0 false Greetz : WwW.IQ-ty.CoM...

TelebidAuctionScript - 'aid' Blind SQL Injection

TelebidauctionScriptaid Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.telebidauctionscript.com/ Demo : http://server/allauctions.php?aid=2+and+1=1 true http://server/allauctions.php?aid=2+and+1=0 false :: Table ::...

Important: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJD...

Ubuntu 8.10 / 9.04 / 9.10 : openjdk-6 vulnerabilities (USN-859-1)

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

USN-859-1: OpenJDK vulnerabilities

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

OpenJDK zoneinfo file existence information leak (6824265)

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

OpenJDK zoneinfo file existence information leak (6824265)

The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo aka tz files, aka Bug Id 6824265...

Microsoft Windows索引服务ActiveX控件内存破坏漏洞（MS09-057）

BUGTRAQ ID: 36629 CVECAN ID: CVE-2009-2507 Windows是微软发布的非常流行的操作系统。 Windows的索引服务所包含的ActiveX控件未正确处理特制Web内容，导致Windows系统上的索引服务中存在内存破坏漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows...

Microsoft Windows Shell Remote Code Execution (MS04-024; CVE-2004-0420)

A vulnerability has been discovered in the Microsoft Windows Shell, an API that provides a basic framework for the Windows user interface. The Shell provides many functions that perform various configuration tasks and background operations, such as launching applications through the Start Menu...

CVE-2009-3495

SQL injection vulnerability in viewmag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the magid parameter, a different vector than CVE-2008-4465...

CVE-2009-3505

SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...

Sql injection

SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...