989 matches found
Windows Executable Download and Execute (via .vbs)
Download an EXE from an HTTPS URL and execute it This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Sessions::CommandShellOptions de...
Ipswitch IMail Server < 11.02 Multiple Vulnerabilities
Binary data 5600.prm...
Panda Antivirus Buffer Overflow
Buffer overflow in Panda Antivirus before 20-07-2007 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an Integer Cast Around. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Panda Antivirus Buffer Overflow
Buffer overflow in Panda Antivirus before 20-07-2007 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an Integer Cast Around. OpenVAS Vulnerability Test Panda Antivirus Buffer Overflow LSS-NVT-2010-041 Developed by LSS Security Team Copyright C 2010 LSS Thi...
Adobe PDF Embedded EXE Social Engineering
This module embeds a Metasploit payload into an existing PDF file. The resulting PDF can be sent to a target as part of a social engineering attack. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModu...
HP OpenView Network Node Manager (OV NNM) - 'OpenView5.exe' CGI Buffer Overflow (Metasploit)
$Id: hpnnmopenview5.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Design/Logic Flaw
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...
CVE-2009-4850
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...
Microsoft Winhlp32 Compressed Phrase Integer Overflow (CVE-2004-1361)
Microsoft Windows provides online help solutions for windows-based applications through help files that are compiled in a proprietary file format. These files may be viewed with the application winhlp32.exe. There is a vulnerability in the way Microsoft Winhlp32 calculates a length value from...
Internet Explorer Winhlp32.exe MsgBox Code Execution
$Id: ms10022ievbscriptwinhlp32.rb 9085 2010-04-15 16:08:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft IE winhlp32.exe服务远程代码执行漏洞(MS10-022)
BUGTRAQ ID: 38463 CVE ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...
PT-2010-1297 · Vmware · Vmware Remote Console +1
Name of the Vulnerable Software and Affected Versions: VMware Remote Console versions prior to the version that fixes the issue in build 158248 Description: The issue allows remote attackers to execute arbitrary code via unspecified vectors. This is due to a format string vulnerability in...
CVE-2009-4764
Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document...
CVE-2009-4764
CVE-2009-4764 affects Adobe Reader on Windows (8.x/9.x). An embedded EXE in a PDF can be executed, enabling remote attackers to run arbitrary code. This is a user‑unrestricted, code execution risk via crafted documents; CVSS base score is 9.3 (HIGH) with network attack vector and complete impact....
Mackeitone Media Player - '.m3u' Stack Buffer Overflow
!/usr/bin/python Mackeitone Media Player .m3u file stack buffer Overflow download link: http://www.makeitone.net/downloads/MakeitOne-MediaPlayerv1.00.exe Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Find by: PLATEN @ ItSecTeam Special Tanks :...
Energizer DUO USB battery charger software allows unauthorized remote system access
Overview The software available for the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. Description Energizer DUO is a USB battery charger. An optional Windows application that allows the user to view the battery charging status has been...
Internet Explorer winhlp32.exe 'MsgBox()'远程代码执行漏洞
BUGTRAQ ID: 38463 CVECAN ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...
CVE-2010-0483
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...
Design/Logic Flaw
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...
CVE-2010-0483
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...