Mozilla 1.x / Netscape 7.0/7.1 - SOAP Integer Overflow

source: https://www.securityfocus.com/bid/10843/info It is reported that Mozilla and Netscape contain an integer overflow vulnerability in the SOAPParameter object constructor. This overflow may result in the corruption of critical heap memory structures, leading to possible remote code execution...

Apache - Arbitrary Long HTTP Headers Denial of Service

include include include include include include include include include define A 0x41 define PORT 80 struct sockaddrin hrm; int connchar ip int sockfd; hrm.sinfamily = AFINET; hrm.sinport = htonsPORT; hrm.sinaddr.saddr = inetaddrip; bzero&hrm.sinzero,8; sockfd=socketAFINET,SOCKSTREAM,0;...

Apache - Arbitrary Long HTTP Headers Denial of Service (C)

Apache - Arbitrary Long HTTP Headers Denial of Service C include include include include include include include include include define A 0x41 define PORT 80 struct sockaddrin hrm; int connchar ip int sockfd; hrm.sinfamily = AFINET; hrm.sinport = htonsPORT; hrm.sinaddr.saddr = inetaddrip;...

Webcam Corp Webcam Watchdog 4.0.1 - sresult.exe Cross-Site Scripting

Webcam Corp Webcam Watchdog 4.0.1 - sresult.exe Cross-Site Scripting source: https://www.securityfocus.com/bid/10837/info Reportedly Webcam Corp Webcam Watchdog is affected by a remote cross-site scripting vulnerability in the sresult.exe binary. This issue is due to a failure of the application ...

Citadel/UX - Remote Denial of Service (PoC)

/ citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include include include include include include include include include define BUFFERSIZE 96+1 define ERROR -1 define...

Microsoft Windows SMS 2.0 - Denial of Service

Microsoft Windows SMS 2.0 - Denial of Service !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $0 \n"; exit; $host = shift@ARGV; $hexmsg =...

MS Windows SMS 2.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================ MS Windows SMS 2.0 Denial of Service Exploit ============================================ !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $...

sambaPoC.txt

Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" 's advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV, Segmentation fault...

Apache HTTPd Arbitrary Long HTTP Headers DoS

Exploit for unknown platform in category dos / poc ============================================ Apache HTTPd Arbitrary Long HTTP Headers DoS ============================================ /usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html...

OverByte ICS FTP Server Remote Denial of Service Exploit

No description provided by source. --Exploit: //=========================================================== include winsock2.h include stdio.h pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...

OverByte ICS FTP Server - Remote Denial of Service

//--Exploit: //=========================================================== include include pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD wVersionRequested; struct hostent pTarget; struct sockaddrin...

CuteNews 1.3 - Comment HTML Injection

CuteNews 1.3 - Comment HTML Injection source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not...

Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Unreal...

Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation (MS04-020)

Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation MS04-020 / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks t...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

Exploit for unknown platform in category local exploits ===================================================================== MS Windows 2K POSIX Subsystem Privilege Escalation Exploit MS04-020 ===================================================================== / Microsoft Windows POSIX Subsyst...

Microsoft Windows Server 2000 - Universal Language Utility Manager (MS04-019)

/ COROMPUTER2004 Crpt Utility Manager exploit v1.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : You know where we are.. COROMPUTER2004 / / original disclaimer / //by Cesar Cerrudo sqlsecat include struct int id...

[EXPL] IBM AIX Inventory Scout Log File Vulnerability (invscoutd)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking

source: https://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting user into performing unintended actions such as approving pop-up...

MPlayer 1.0pre4 GUI - Filename handling Overflow

/ c0ntex open-security org / include include include include include include include include include define SUCCESS 0 / True / define FAILURE 1 / False / define ABANNER "MPlayerMeMPlayerMediaMayhem" define ALIGN 0 / Stack address alignment / define BUFFER 544 / Exactly overwrite EIP / define EIPW...

Subversion 1.0.2 - svn_time_from_cstring() Remote Overflow

Subversion 1.0.2 - svntimefromcstring Remote Overflow / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another functio...