MS Windows JPEG GDI+ Overflow Shellcoded Exploit

Exploit for unknown platform in category remote exploits ================================================ MS Windows JPEG GDI+ Overflow Shellcoded Exploit ================================================ // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ //...

MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)

Exploit for unknown platform in category dos / poc ============================================================ MS Windows JPEG Processing Buffer Overrun Exploit MS04-028 ============================================================ !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field wi...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

Apache < 2.0.44 MS-DOS Device Name DoS / Code Execution

Binary data 1497.prm...

MS SMTP NULL Session Mail Relay

Binary data 2040.prm...

Resin < 2.1s020604 MS-DOS Device Path Disclosure

Binary data 1517.prm...

MS Internet Explorer Remote Null Pointer Crash (mshtml.dll)

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer Remote Null Pointer Crash mshtml.dll =========================================================== Right Click aOn Me And Click "Save Target As" 0day.today 2018-04-09...

Multiple Internet Explorer vulnerabilities

Integer overflow on .BMP parsing, double free on GIF parsing, new ms-its: vulnerability variant...

MS Windows SMS 2.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================ MS Windows SMS 2.0 Denial of Service Exploit ============================================ !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $...

MS Windows SMS 2.0 Denial of Service Exploit

No description provided by source. !/usr/bin/perl SMS DOS proof of concept and test code use Socket; use IO::Socket; if @ARGV != 1 print "usage: $0 host or ip\n"; exit; $host = shift@ARGV; $hexmsg =...

MS Internet Explorer (11 bytes) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= MS Internet Explorer 11 bytes Denial of Service Exploit ========================================================= @;/ 0day.today 2018-03-05...

MS Internet Explorer Remote Wscript.Shell Exploit

Exploit for unknown platform in category remote exploits ================================================= MS Internet Explorer Remote Wscript.Shell Exploit ================================================= ----------------------------------------------------- default.htm...

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...

wvWare buffer overflow

Buffer overflow on parsing MS Word document DateTime filed...

Inktomi Search MS-DOS Device Name Request Path Disclosure

This web server is running a vulnerable version of Verity Ultraseek formerly Inktomi Search. Certain requests using MS-DOS special file names such as NUL can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...

CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

CVE-2004-0050

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

CVE-2004-0050

The CVE-2004-0050 issue affects Verity Ultraseek (Inktomi Search) prior to 5.2.2 where an MS-DOS device name parameter in the web search option can cause disclosure of the full path to the document root. The OpenVAS entries corroborate a physical path disclosure vulnerability in Ultraseek/Verity,...

MS Windows XP/2K Lsasrv.dll Remote Universal Exploit (MS04-011)

Exploit for unknown platform in category remote exploits =============================================================== MS Windows XP/2K Lsasrv.dll Remote Universal Exploit MS04-011 =============================================================== / HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RP...