IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)

IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor url:http://www.incredimail.com/english/splash.aspx Tested on windows XP SP3 1-03-2010 Debugging info -------------- Exception Code: ACCESSVIOLATION Disasm: 678914AE MOV EDX,ECX ImSpoolU.dll Seh Chain:...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Novell Netware FTP Remote Stack Overflow

No description provided by source. Application: Novell Netware FTP Remote Stack Overflow Platforms: Novell Netware 6.5 SP8 Exploitation: Remote Code Execution CVE Number: CVE-2010-0625 Novell TID: 3238588 Discover Date: 2009-07-23 Author: Francis Provencher Protek Research Lab's Blog:...

Design/Logic Flaw

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...

WFTPD REST命令远程拒绝服务漏洞

BUGTRAQ ID: 38762 WFTPD是一款Windows平台下的FTP服务软件。 WFTPD服务器在处理REST命令时存在拒绝服务漏洞，远程攻击者可以通过REST命令在指定了无效的起始位置后请求文件导致FTP服务终止。 Texas Imperial Software WFTPD 3.3 厂商补丁： Texas Imperial Software ----------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpd.com/default.html WFTPD 3.3...

VariCAD 2010-2.05 EN Local Buffer Overflow Vulnerability

Exploit for multiple platform in category local exploits ======================================================== VariCAD 2010-2.05 EN Local Buffer Overflow Vulnerability ======================================================== / Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow : Date: 1...

VariCAD 2010-2.05 EN - Local Buffer Overflow

/ Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow : Date: 15 March 2010 Author: n00b Realname: carl cope Software Link: http://www.varicad.com/en/home/ Version: All versions are affected. Tested on: Windows xp sp3,Vista sp2,Linux unbuntu CVE : if exists...

WFTPD 3.3 - Remote REST Denial of Service

WFTPD 3.3 - Remote REST Denial of Service WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try:...

WFTPD 3.3 Remote Denial Of Service

WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try: sock.connecthostname, 21 except: print "- Connection...

WFTPD 3.3 Remote REST DoS Exploit

Exploit for linux platform in category dos / poc ================================= WFTPD 3.3 Remote REST DoS Exploit ================================= WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def...

Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)

An elevation of privilege vulnerability exists in the Windows Kernel due to the way the kernel handles certain exceptions. The Windows Kernel is the core of the operating system. It provides system level services such as device management and memory management, allocates processor time to...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

Mediacoder 0.7.3.4605 - Local Buffer Overflow / Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We positio...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

/ Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode where is convienientbasicly anywhe...

Ollydbg 2.00 Beta Local Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== Ollydbg 2.00 Beta Local Overflow Exploit ======================================== Exploit: Ollydbg 2.00 Beta Local Overflow Exploit Author : r45c4l Taken from thr original advisory published by "SuBz3...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except:...

Update Protection against Windows Kernel Exception Handler Vulnerability (MS10-015)

An elevation of privilege vulnerability exists in the Windows Kernel due to the way the kernel handles certain exceptions. The Windows Kernel is the core of the operating system, providing system level services such as device management and memory management. An attacker who successfully exploite...

Core Impact 7.5 - Denial of Service

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI, AH,ICW Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S,...

Microsoft Windows kernel privilege escalation

Double free vulnerability, exception handler vulnerability...

Microsoft Windows kernel privilege escalation

Invalid exception handling in GP trap handler allows ring0 privilege escalation...

Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability

Microsoft Windows operating system is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900740. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...