CVE-2004-0552

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as 1 LPT1, 2 COM1, 3 AUX, 4 CON, or 5 PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed...

MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload

Exploit for unknown platform in category remote exploits =============================================================== MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload =============================================================== / Exploit Name: ============= JpegOfDeath.M.c...

MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)

Exploit for unknown platform in category remote exploits ============================================================== MS Windows JPEG GDI+ Overflow Administrator Exploit MS04-028 ============================================================== !/bin/sh MS04-028 Exploit PoC II with Shellcode:...

MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)

Exploit for unknown platform in category dos / poc ============================================================ MS Windows JPEG Processing Buffer Overrun Exploit MS04-028 ============================================================ !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field wi...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacke...

MS Windows JPEG GDI+ Overflow Shellcoded Exploit

Exploit for unknown platform in category remote exploits ================================================ MS Windows JPEG GDI+ Overflow Shellcoded Exploit ================================================ // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ //...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

Apache < 2.0.44 MS-DOS Device Name DoS / Code Execution

Binary data 1497.prm...

Resin < 2.1s020604 MS-DOS Device Path Disclosure

Binary data 1517.prm...

MS SMTP NULL Session Mail Relay

Binary data 2040.prm...

MS Internet Explorer Remote Null Pointer Crash (mshtml.dll)

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer Remote Null Pointer Crash mshtml.dll =========================================================== Right Click aOn Me And Click "Save Target As" 0day.today 2018-04-09...

Multiple Internet Explorer vulnerabilities

Integer overflow on .BMP parsing, double free on GIF parsing, new ms-its: vulnerability variant...

MS Windows SMS 2.0 Denial of Service Exploit

No description provided by source. !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $0 host or ip\n"; exit; $host = shift@ARGV; $hexmsg =...

MS Windows SMS 2.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================ MS Windows SMS 2.0 Denial of Service Exploit ============================================ !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $...

MS Internet Explorer (11 bytes) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= MS Internet Explorer 11 bytes Denial of Service Exploit ========================================================= @;/ 0day.today 2018-03-05...

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...

MS Internet Explorer Remote Wscript.Shell Exploit

Exploit for unknown platform in category remote exploits ================================================= MS Internet Explorer Remote Wscript.Shell Exploit ================================================= ----------------------------------------------------- default.htm...

wvWare buffer overflow

Buffer overflow on parsing MS Word document DateTime filed...

Inktomi Search MS-DOS Device Name Request Path Disclosure

This web server is running a vulnerable version of Verity Ultraseek formerly Inktomi Search. Certain requests using MS-DOS special file names such as NUL can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...