739 matches found
eWebquiz 8 - Blind SQL Injection Vulnerability
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ?...
Oracle MySQL for Microsoft Windows MOF Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
TrendMicro Control Manger <= 5.5 CmdProcessor.exe - Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC
No description provided by source. / deslock-list-zero.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs...
IcoFX - Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initializeinfo =...
Veritas Backup Exec Name Service Overflow
No description provided by source. $Id: nameservice.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
NetWin SurgeFTP Authenticated Admin Command Injection
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'SurgeFTP Remote Command Execution', 'Description' = %q This module exploits a flaw in t...
HP Managed Printing Administration jobAcct Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit
No description provided by source. ===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl ip imap4 user imap4 pass Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
PT-2014-1798
Name of the Vulnerable Software and Affected Versions JBIG-KIT versions prior to 2.1 Description The issue is related to a stack-based buffer overflow in the jbg dec in function in libjbig/jbig.c of JBIG-KIT. This can be exploited remotely, potentially leading to a denial of service application...
SerComm Device远程代码执行漏洞
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include...
SerComm Device - Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "SerComm Device Remote Code Execution", 'Description' = %q This module will cause remote code execution on several SerComm devices...
TYPO3 Multiple Vulnerabilities (Dec 2010)
TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...
IcoFX ICO处理缓冲区溢出漏洞
BUGTRAQ ID：64221 CVE ID：CVE-2013-4988 IcoFX是一款免费的图标设计编辑工具。 IcoFX在读取ICONDIRENTRY结构时存在一个边界错误，允许攻击者利用漏洞构建恶意ICO文件，如ICONDIR结构中包含超大"idCount"值，诱使用户解析，可触发基于栈的缓冲区溢出。远程攻击者可以利用漏洞可使应用程序崩溃或可执行任意代码。 0 IcoFX IcoFX 2.5 目前没有详细解决方案提供： http://www.icofx.ro/ This module requires Metasploit:...
Threat Outbreak Alert: Fake Product Order Email Messages on December 25, 2013
Severity Alert ID: 32286 First Published: 2014 January 2 14:21 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 25, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...
CORE-2013-0903 - RealPlayer Heap-based Buffer Overflow Vulnerability
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ RealPlayer Heap-based Buffer Overflow Vulnerability 1. Advisory Information Title: RealPlayer Heap-based Buffer Overflow Vulnerability Advisory ID: CORE-2013-0903 Advisory URL:...
Open Flash Chart 2 Arbitrary File Upload Vulnerability
This Metasploit module exploits a file upload vulnerability found in Open Flash Chart version 2. Attackers can abuse the 'ofcuploadimage.php' file in order to upload and execute malicious PHP files. This module requires Metasploit: http//metasploit.com/download Current source:...
Cisco Unity Express Cross Site Request Forgery / Cross Site Scripting
Exploit Title: Cisco Unity Express Multiple Vulnerabilities Reported: December 2012 Disclosed: February 2013 Author: Jacob Holcomb of Independent Security Evaluators CVE: XSS - CVE-2013-1114 and CSRF - CVE-2013-1120 http://infosec42.blogspot.com/2013/02/cisco-unity-express-vulnerabilites.html Cis...
Adobe Flash Player Multiple Vulnerabilities (Dec 2012) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player Multiple Vulnerabilities (Dec 2012) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...