PHP 5.1.6 - Mb_Parse_Str Function Register_Globals Activation

source: https://www.securityfocus.com/bid/23016/info PHP is prone to a weakness that allows attackers to enable the 'registerglobals' directive because the application fails to handle a memory-limit exception. Enabling the PHP 'registerglobals' directive may allow attackers to further exploit...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7031: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

SupportSoft ActiveX controls contain multiple buffer overflows

Overview The SupportSoft ActiveX controls contain multiple buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SupportSoft provides multiple ActiveX packages that are used by third party vendors to...

Linux kernel privilege escalation

Invalid exception conditions handling leads to multiple reace conditions with privileged memory access...

VicFTPS 5.0 - CWD Remote Buffer Overflow (PoC)

VicFTPS 5.0 - CWD Remote Buffer Overflow PoC / VicFTPs Server CWD Remote Buffer Overflow Vulnerability DoS Proof of concept r0ut3r writ3r at gmail.com Thanks to: Marsu Marsupilamipowa at hotmail.fr for helping me out with this vulnerability. Greets Marsu, and Timq. Description: Sending a long...

VicFTPS < 5.0 (CWD) Remote Buffer Overflow Exploit PoC

No description provided by source. / VicFTPs Server CWD Remote Buffer Overflow Vulnerability DoS Proof of concept r0ut3r writ3r at gmail.com Thanks to: Marsu Marsupilamipowa at hotmail.fr for helping me out with this vulnerability. Greets Marsu, and Timq. Description: Sending a long argument to C...

ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...

cold-xss.txt

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...

Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC

No description provided by source. /usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow PoC /usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail:...

Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC ======================================================= /usr/bin/ python print...

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)

/usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site: http://shinnai.altervista.org" print...

Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC

No description provided by source. !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

Dev-C++ 4.9.9.2 - .CPP File Parsing Local Stack Overflow (PoC)

Dev-C++ 4.9.9.2 - .CPP File Parsing Local Stack Overflow PoC !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" pri...

Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC ========================================================= !/usr/bin/env python print...

CVE-2006-6906: Undefined Security Weakness

Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach Exception Handling", a different issue than CVE-2006-6900...

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing. The flaw is triggered wh...

CVE-2006-6475

CVE-2006-6475 affects Mandiant First Response (FRAgent.exe) prior to version 1.1.1 in daemon/SSL mode. The vulnerability is a denial-of-service condition: remotely sending malformed requests to an SSL-enabled daemon can trigger an unhandled exception, causing sockets to reach an indefinite CLOSE_...