Microsoft Excel 2000/2003 - Sheet Name (PoC)

Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...

Microsoft Windows - GDI+ '.ICO' File Remote Denial of Service

Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4044.zip 06072007-CVE-2007-2237.zip milw0rm.com 2007-06-07...

Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation

Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.com 2007-05-30...

Microsoft Word 2007 - Multiple Vulnerabilities

Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.doc - Unspecified Overflow in word...

Microsoft Windows - Animated Cursor '.ani' Universal Generator

-------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz 2: Jamikazu, Skylined pretty good t-short on BH07 Europe -...

RunCMS 1.x - Avatar Arbitrary File Upload

source: https://www.securityfocus.com/bid/20874/info RunCMS is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process...

Outpost Firewall PRO 4.0 - Local Denial of Service

source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate...

Clam AntiVirus 0.88.4 - 'rebuildpe' Remote Heap Overflow (PoC)

Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2587.exe.bz2 10172006-clampetiteheap.exe.bz2 milw0rm.com 2006-10-17...

webSPELL <= 4.01.01 Database Backup Download Vulnerability

Exploit for unknown platform in category web applications ========================================================== webSPELL = 4.01.01 Database Backup Download Vulnerability ========================================================== WebSPELL = 4.01.01 Accessible Database Backup Download Exploit...

netPanzer 0.8 rev 952 - 'frameNum' Server Terminiation

netPanzer 0.8 rev 952 frameNum Server Terminiation Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1820.zip 05232006-panza.zip milw0rm.com 2006-05-23...

RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Scanner

class101 - http://heapoverflow.com RealVNC 4.1.0 - 4.1.1 VNC Null Authentication Vulnerability Scanners --------------------------------------------------------------------- windows: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1799-1.rar...

raydium svn 309 - Multiple Vulnerabilities

Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1784.zip 05132006-raydiumx.zip...

linux/x86 - xor-encoded Connect Back Shellcode 371 bytes

linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...

PhxContacts 0.93 - contact_view.php?id_contact SQL Injection

PhxContacts 0.93 - contactview.php?idcontact SQL Injection source: https://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Mantis Bug Tracker 0.x1.0 - manage_user_page.php?sort Cross-Site Scripting

Mantis Bug Tracker 0.x1.0 - manageuserpage.php?sort Cross-Site Scripting source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure ...

EZ Invoice Inc. EZI 2.0 - Invoices.php SQL Injection

EZ Invoice Inc. EZI 2.0 - Invoices.php SQL Injection source: https://www.securityfocus.com/bid/16133/info EZI is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP Lite Calendar Express 2.2 - Subscribe.php?cid SQL Injection

PHP Lite Calendar Express 2.2 - Subscribe.php?cid SQL Injection source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

Early Impact ProductCart 2.6/2.7 - 'modCustomCardPaymentOpt.asp?idc' SQL Injection

source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...

Apple Mac OSX 10.x - BlueTooth Directory Traversal

source: https://www.securityfocus.com/bid/13491/info Apple Mac OS X is prone to a directory-traversal vulnerability. Since the software fails to sufficiently sanitize input, a remote attacker could use the Bluetooth file- and object-exchange services to access files outside the default...

phpBB Notes Module - SQL Injection

source: https://www.securityfocus.com/bid/13417/info The notes module for phpBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...