System in a variety of hidden super user method-vulnerability warning-the black bar safety net

One, how in the graphical interface to establish a hidden super user Graphical interface for local or open 3 3 8 9 Terminal Services the broiler. Above I mentioned that the author said the method is very good, but more complex, 还要用到psu.exelet the program to the system user identity of the running...

CVE-2008-0953

The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953...

Claroline 1.7.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other...

HP OpenView Network Node Manager OpenView5.exe Action Parameter Traversal Arbitrary File Access

The version of HP OpenView Network Node Manager installed on the remote host fails to completely sanitize user input to the 'Action' parameter of the 'OpenView5.exe' CGI script. Using a value with directory traversal sequences containing slashes rather than backslashes, an unauthenticated, remote...

HP OpenView Network Node Manager multiple CGI buffer overflow

Buffer overflows in ovlogin.exe, OpenView5.exe, snmpviewer.exe, webappmon.exe. OpenView5.exe directory traversal...

HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/28745/info HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues include a directory-traversal issue and multiple denial-of-service issues. UPDATE April 14, 2008:...

Proviso SiteKiosk File Download Vulnerability

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...

Design/Logic Flaw

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

win32 Download and Execute Shellcode Generator (browsers edition)

Exploit for win32 platform in category shellcode ================================================================= win32 Download and Execute Shellcode Generator browsers edition ================================================================= !/usr/bin/perl $loadingurl=$ARGV0; chomp $loadingurl...

Bypass-Myspace-Phisher-Block.txt

Bypass Myspace.com Phisher Block Script By IMC EXE February 28, 2008 Greetz IMC GrahamPhisher IMC Tullywacker IMC Phire Phreak IMC TwiZted Tom Insanemasterminds.com Script ------------------ Bypass Phisher Block Script By IMC EXE...

Macrovision FlexNet DownloadManager Insecure Methods Exploit

No description provided by source. !-- Macrovision FlexNet DownloadManager Insecure Methods Exploit Implemented Categories: Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, ISDM.exe version 6.1.100.61372 -- html head titleMacrovision FlexNet...

CVE-2007-6401

Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player WMP 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402...

CVE-2007-6204

Multiple stack-based buffer overflows in HP OpenView Network Node Manager OV NNM 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to 1 ovlogin.exe, 2 OpenView5.exe, 3 snmpviewer.exe, and 4 webappmon.exe, as demonstrated via a long Action paramet...

Microsoft Windows Media Player 6.4 - .MP4 File Stack Overflow

Microsoft Windows Media Player 6.4 - .MP4 File Stack Overflow !/bin/perl Windows media player 6.4 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content:...

Windows Media Player 6.4 MP4 File Stack Overflow PoC

Exploit for unknown platform in category local exploits ==================================================== Windows Media Player 6.4 MP4 File Stack Overflow PoC ==================================================== !/bin/perl Windows media player 6.4 MP4 Stack Overflow 0-day discovered and...

腾讯QQ LaunchP2PShare远程栈溢出漏洞

BUGTRAQ ID: 26613 腾讯QQ是在中国非常广泛使用的即时聊天工具。 QQ的VQQPLAYER.OCX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QQ的VQQPLAYER.OCX控件没有正确地验证LaunchP2PShare方式（ClassId是AC3A36A8-9BFF-410A-A33D-2279FFEB69D2）： id0x00000030 VARIANTBOOL LaunchP2PShare BSTR szExeName, long nDuration;...

Lianzhong ConnectAndEnterRoom ActiveX stack overflow vulnerability(exp)-vulnerability warning-the black bar safety net

exeurl = InputBox "please input the download execution exe of the address:", "input","" 'code by NetPatch if exeurl "" then...

CVE-2002-2384

The CVE-2002-2384 entry concerns Hotfoon 4.00. hotfoon4.exe stores user names and passwords in cleartext in the hotfoon2 registry key, enabling local users to gain access to user accounts and steal phone service. Root cause: credentials stored in plaintext in a registry location. Impact: local ac...