Microsoft Windows Messenger Service (French) - Remote (MS03-043)

// / Crpt MS03-043 - Messenger exploit by MrNice Crpt / / --------------------------------------------------------------- / / / / This Sploit use the unhandledexceptionfilter to redirect / / the execution. When overflow occur we have : / / / / mov eax,esi+8 / / mov ecx,esi+Ch / / mov dword ptr...

Microsoft Windows Messenger Service (French) - Remote (MS03-043)

Microsoft Windows Messenger Service French - Remote MS03-043 // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / / --------------------------------------------------------------- / / / / This Sploit use the unhandledexceptionfilter to redirect / / the execution. When overflow occur we have : ...

MS Windows Messenger Service Remote Exploit FR (MS03-043)

Exploit for unknown platform in category remote exploits ========================================================= MS Windows Messenger Service Remote Exploit FR MS03-043 ========================================================= // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / /...

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow

/ ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by drG4njubas \ DWC Group ---------------------------------------------------- ,---------------------------------------------------- ;This exploit works against LeapFTP 2.7.3.600 ;running on windows...

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by drG4njubas \ DWC Group ---------------------------------------------------- ,---------------------------------------------------- ;This exploit...

LeapFTP 2.7.x Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================ LeapFTP 2.7.x Remote Buffer Overflow Exploit ============================================ / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by...

BaSoMail 1.24 - POP3 Server Denial of Service

source: https://www.securityfocus.com/bid/7724/info BaSoMail POP3 server has been reported prone to a remote denial of service vulnerability. It has been reported that a remote authenticated attacker, may supply negative value integers to several POP3 commands successively. If the attacker then...

Eudora 5.2.1 buffer overflow DoS

Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I notice that sending a filename with many dots crashes Eudora, e.g. From: me To: you Attachment ConvertedCR: "B.A.A.A ... .A.A.A" with 122 repetitions of ".A" make it crash, writing an Exception.log file. Fewer...

Phantom of the Opera (GM#003-OP)

GreyMagic Security Advisory GM003-OP ===================================== By GreyMagic Software, Israel. 04 Feb 2003. Available in HTML format at http://security.greymagic.com/adv/gm003-op/. Topic: Phantom of the Opera. Discovery date: 29 Jan 2003. Affected applications: ======================...

ColdFusion Heap Overflow -continued

Hi all, I am attempting to write exploit code for the coldfusion heap overflow still. On advice from various on the secfocus list i have installed softice and located the exception handler in question. The handler code starts at 0x77f82b95 The code I am trying to manipulate is at 0x77f8e43b Mov...

Multiple bugs in SolarWinds TFTP

Directory traversal, invalid exception handling...

MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable

Hello, Test page for Konqueror is at: http://pp.siedziba.pl/2f/ I have also tested it with Mozilla 1.0 Gecko/20020829 and Galeon 1.2.5 Gecko/20020606 and found not vulnerable - the script throws "Permission denied to get property HTMLDocument.body" exception. -- Piotr Pawow mailto:[email protected]...

Google Toolbar 1.1.60 - Search Function Denial of Service

Google Toolbar 1.1.60 - Search Function Denial of Service source: https://www.securityfocus.com/bid/5477/info Reportedly, when the Google Toolbar receives a search query it may cause Microsoft Internet Explorer to crash. When a user views a malicious web page it will cause the Google Toolbar to...

Google Toolbar 1.1.60 - Search Function Denial of Service

source: https://www.securityfocus.com/bid/5477/info Reportedly, when the Google Toolbar receives a search query it may cause Microsoft Internet Explorer to crash. When a user views a malicious web page it will cause the Google Toolbar to throw an exception in 'oleaut32.dll'. // it raises the...

Microsoft Internet Explorer cash path leakage via XML

It's possible to obtain path of loaded document by using XML exception handlers...

Login errors in 1.3

When logging in as our special user who is restricted to one certain project, I get this error message from secure/Dashboard.jspa java.lang.IllegalArgumentException: Source may not be null at webwork.util.SubsetIteratorFilter.setSourceSubsetIteratorFilter.java:33 at...

Problem when signing up for new user Account from login page

I signed up for a new user account from the login page, filled in a username, password, name and e-mail. Then I tried to login with the new username and got this exception: java.lang.NullPointerException at com.opensymphony.module.user.User.getGroupsUser.java:94 at...

Microsoft Windows XP/2000 - GDI Denial of Service

source: https://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode Exception due to a memory access error. This acti...

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

Lotus Domino vulnerable to DoS via crafted unicode GET request

Overview The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial of service situation. Description Sending a crafted GET request containing numerous unicode characters can trigger a server exception that will crash the Domino server. If qnc.exe is removed from the...