Lucene search
+L

3960 matches found

Cvelist
Cvelist
•added 2006/02/06 11:00 p.m.•46 views

CVE-2006-0564

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field...

7.6AI score0.71697EPSS
SaveExploits11References7
exploitpack
exploitpack
•added 2006/02/06 12:00 a.m.•35 views

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow (1)

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow 1 / Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't...

0.3AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/02/06 12:00 a.m.•37 views

[SA18740] Microsoft HTML Help Workshop ".hhp" Parsing Buffer Overflow

TITLE: Microsoft HTML Help Workshop ".hhp" Parsing Buffer Overflow SECUNIA ADVISORY ID: SA18740 VERIFY ADVISORY: http://secunia.com/advisories/18740/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Microsoft HTML Help Workshop 4.x http://secunia.com/product/6967/...

1.9AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/02/06 12:00 a.m.•34 views

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit

No description provided by source. / Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit...

7.1AI score
SaveExploits0
zdt
zdt
•added 2006/02/06 12:00 a.m.•49 views

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit ================================================================ / Microsoft HTML Help Workshop .hhp file Buffer...

6.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/06 12:00 a.m.•4 views

CVE-2006-0564: Undefined Security Weakness

Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field...

7.5CVSS6.8AI score0.71697EPSS
SaveExploits11References1
Metasploit
Metasploit
•added 2006/02/06 12:00 a.m.•70 views

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow

This module exploits a stack buffer overflow in HTML Help Workshop 4.74 by creating a specially crafted hhp file. Module Options msf use exploit/windows/fileformat/hhw/hhpcontentfilebof msf undefinedhhpcontentfilebof show actions ...actions... msf undefinedhhpcontentfilebof set ACTION msf...

7.5CVSS6.1AI score0.71697EPSS
SaveExploits11
Exploit DB
Exploit DB
•added 2006/02/06 12:00 a.m.•76 views

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)

/ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit wouldn't exist if we didn't have...

10CVSS5.8AI score0.71697EPSS
SaveExploits15
Metasploit
Metasploit
•added 2006/02/06 12:00 a.m.•72 views

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow

This module exploits a stack buffer overflow in HTML Help Workshop 4.74 By creating a specially crafted hhp file, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/hhw/hhpcompiledfilebof msf undefinedhhpcompiledfilebof show actions ...actions...

7.5CVSS6.6AI score0.71697EPSS
SaveExploits11
CVE
CVE
•added 2006/02/02 11:00 a.m.•96 views

CVE-2006-0525

CVE-2006-0525 affects multiple Adobe products (notably Photoshop CS2, Illustrator CS2, and Adobe Help Center) where a large number of .EXE and .DLL files are installed with write-access for the Everyone group. This local-privilege-escalation vulnerability allows bypassing protections via Trojan h...

4.6CVSS6.6AI score0.01325EPSS
SaveExploits0References12Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/02 12:00 a.m.•3 views

CVE-2006-0525: Undefined Security Weakness

Multiple Adobe products, including 1 Photoshop CS2, 2 Illustrator CS2, and 3 Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs...

4.6CVSS5.8AI score0.01325EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2005/12/27 12:00 a.m.•33 views

Cerberus Help Desk < 2.7.0 Multiple Vulnerabilities

Binary data 3337.prm...

7.5CVSS7.3AI score0.03223EPSS
SaveExploits3References3
securityvulns
securityvulns
•added 2005/12/20 12:00 a.m.•102 views

PHPGedView &lt;= 3.3.7 remote code execution

--- PHPGedView = 3.3.7 Arbitrary local/remote code execution & php injection --- software: site: http://www.phpgedview.net/ description: "PhpGedView is a revolutionary genealogy program which allows you to view and edit your genealogy on your website." - vulnerabilties:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/12/16 12:00 a.m.•61 views

Multi-Format Shellcode Encoding Tool - Beta 2.0 w32

Multi-Format Shellcode Encoding Tool - Beta v2.0 w32. Shellcode exploit for generator platform / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" .SP dSSP' sSSSSSSP...

7.4AI score
SaveExploits0
NVD
NVD
•added 2005/12/05 11:03 a.m.•15 views

CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

7.5CVSS7AI score0.01449EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2005/12/05 11:00 a.m.•25 views

CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

7AI score0.01449EPSS
SaveExploits1References1
CVE
CVE
•added 2005/12/05 11:00 a.m.•47 views

CVE-2005-4025

CVE-2005-4025 affects Help Desk Reloaded Free Help Desk. The vulnerability arises because install.php is not removed/protected after installation, enabling remote attackers to gain privileges by directly requesting install.php and then accessing accountsetup.php to create a new user. Public sourc...

7.5CVSS7.3AI score0.01449EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/05 12:00 a.m.•3 views

CVE-2005-4025: Undefined Security Weakness

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

7.5CVSS5.8AI score0.01449EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2005/12/03 12:00 a.m.•31 views

freeHelpInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 018 ------------------------------------------------------ Date - 11/2005 Free Help Desk Software Inject Admin Account AFFECTED PRODUCTS ================= Free Help Desk http://www.helpdeskreloaded.com Overview:...

7.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/11/29 2:00 a.m.•30 views

CVE-2004-2602

PHP remote file inclusion vulnerability in UberTec Help Center Live HCL before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCLpath parameter to pipe.php...

7.5AI score0.01931EPSS
SaveExploits1References7
Rows per page
Query Builder