1393 matches found
Borland StarTeam 2008 10.0 .57 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28080/info Borland StarTeam is prone to multiple issues, including multiple integer-overflow vulnerabilities, a heap-overflow vulnerability, and a denial-of-service vulnerability. Successfully exploiting these issues allo...
Windows XP SP3 English MessageBoxA Shellcode - 87 bytes
No description provided by source. / Title: Windows XP SP3 English MessageBoxA Shellcode 87 bytes Date: August 20, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Tested on: Windows XP SP3 En Thanks: ishtus Greetz: Astalavista, OffSEC, Exploit-DB Exploit-DB Notes: Tested under Windows...
OSX <= 10.8.4 - Local Root Privilege Escalation (py)
No description provided by source. !/usr/bin/python Original MSF Module: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb Exploit Title: OSX = 10.8.4 Local Root Priv Escalation Root Reverse Shell Date: 08-27-2013 Exploit Author: David...
File Sharing Wizard 1.5.0 - (SEH) Exploit
No description provided by source. !/usr/bin/python print \n print Team Hackers Garage print www.garage4hackers.com print print File Sharing Wizard Version 1.5.0 print Remote Command Execution print Author: b0nd print [email protected] print print Greetz to: The Hackers Garage Family print...
Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (PoC)
No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/2010 Software link:...
Microsoft Excel - HFPicture Record Parsing Memory Corruption (0day)
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 23 0day binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Memory Corruption 0day Version : Excel 2002 SP3 Analysis :...
Magneto Net Resource ActiveX 4.0.0.5 - NetConnectionEnum Exploit (Universal)
No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX v4.0.0.5 NetConnectionEnum SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch -...
Open and Compact FTPd Pre-Authentication Crash (PoC)
No description provided by source. Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to dookie2000ca Date Found: 07/02/2010 Software link: https://sourceforge.net/projects/open-ftpd/ Tested on: Windows XP SP2/SP3 Professional Nod to the Exploit-DB Team It's...
Linux Kernel < 2.6.19 - udp_sendmsg Local Root Exploit (x86/x64)
No description provided by source. / second verse, same as the first CVE-2009-2698 udpsendmsg, x86/x64 Cheers to Julien/Tavis for the bug, p0c73n1 for just throwing code at NULL and finding it executed This exploit is a bit more nuanced and thoughtful ; use ./therebel.sh for everything At this...
Joomla KISS Advertiser Remote File & Bypass Upload Vulnerability
No description provided by source. Exploit Title: Joomla comKSAdvertiser Remote File & Bypass Upload Vulnerability Google Dork: inurl:index.php?option=comksadvertiser Date: 12-07-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R site: http://www.insecurityperu.org/ vendor Link:...
vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks
No description provided by source. vBSEO - Persistent XSS via LinkBacks http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/ Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and t...
Joomla Component com_ranking SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comranking SQL Injection Vulnerability Author: DevilZ TM Data : 2010-04-05 InformatioN Title : Joomla Component comranking SQL Injection Vulnerability Author : DevilZ TM By D3v1l.blackhat Homepage : http://www.DEVILZTM.com Email :...
Xenorate 2.50 - (.xpl) universal Local Buffer Overflow Exploit (SEH) (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::Seh include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Xenorate 2.50.xpl universal Local Buffer Overflow...
Apache Struts < 2.2.0 - Remote Command Execution
No description provided by source. $Id: strutscodeexec.rb 13586 2011-08-19 05:59:32Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Adobe Reader - util.printf() JavaScript Function Stack Overflow Exploit
No description provided by source. Adobe Reader 'util.printf' JavaScript Function Stack Buffer Overflow Exploit author: Elazar http://exploit-db.com/sploits/2008-APSB08-19.pdf milw0rm.com 2008-11-05...
Aika 0.2 colladaconverter Xml Parsing Buffer Overflow
No description provided by source. / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...
Elecard AVC_HD/MPEG Player 5.7 - Buffer Overflow
No description provided by source. !/usr/bin/env python Software: Elecard AVCHD/MPEG Player 5.7 SEH Author: sickness Download : http://www.elecard.com/en/products/end-user-software/playback/avchd-player.html PoC for Elecard MPEG: http://www.exploit-db.com/exploits/16237/ Tested : Windows XP...
Microsoft Windows 98SE User32.DLL Icon Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13791/info The Microsoft 'user32.dll' library is prone to a denial of service vulnerability. The issue manifests when the library handles icon .ico files containing large size values. Reports indicate that this issue exis...
Barracuda Networks Spam & Virus Firewall <= 4.1.1.021 Remote Configuration Retrieval
No description provided by source. !/bin/bash Exploit by ShadowHatesYou [email protected] The resulting output is an SQL dump containing the Barracuda's configuration, which includes goodies such as: The administrative password for the BSFsystempassword MTA LDAP passwordsmtaldapadvancedpasswor...
ezb systems ultraiso 8.0.1392 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17724/info Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. A successful attack can allow the attacker to place...