MS Windows Lsasrv.dll RPC Remote Buffer Overflow Expl (MS04-011)

Exploit for unknown platform in category remote exploits =================================================================== MS Windows Lsasrv.dll RPC Remote Buffer Overflow Exploit MS04-011 =================================================================== include pragma commentlib,"mpr.lib"...

MS Windows 2K/XP TCP Connection Reset Remote Attack Tool

Exploit for unknown platform in category dos / poc ======================================================== MS Windows 2K/XP TCP Connection Reset Remote Attack Tool ======================================================== AFX TCP Reset by Aphex http://www.iamaphex.cjb.net email protected Compile...

asleap - offline LEAP authentication hacking

MS-CHAP NTLM vulnerability allows offline passwords attacks...

MSWordPW.txt

Hi ... There are several vulnerabilities published/discussed regarding MS Word MS Office in general, however, 'tis is the most "no brainer" I've discovered ... Vulnerability: Password protected document that has "tracked changes, comments or forms" password protected Vulnerable: MS Word Win2K/XP...

[waraxe-2004-SA#011 - Multiple vulnerabilities in MS Analysis v2.0 module for PhpNuke]

================================================================================ waraxe-2004-SA011 ================================================================================ Multiple vulnerabilities in MS Analysis v2.0 module for PhpNuke...

CVE-2004-1840

Multiple cross-site scripting XSS vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the 1 screen parameter to modules.php, 2 modulename parameter to title.php, 3 sortby parameter to modules.php, or 4 overview parameter to...

CVE-2004-1839

MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to 1 browsers.php, 2 mstrack.php, or 3 title.php, which reveal the full path in a PHP error message...

PHP-Nuke MS-Analysis Module - HTTP Referrer Field SQL Injection

PHP-Nuke MS-Analysis Module - HTTP Referrer Field SQL Injection source: https://www.securityfocus.com/bid/9948/info Reportedly the MS-Analysis module is prone to a remote SQL injection vulnerability. This issue is due to a failure to properly sanitize user supplied HTTP header input before using ...

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9947/info It has been reported that MS-Analysis is prone to a multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI parameters. These issues could permit a remote attacke...

MS04-010: MSN Messenger Information Disclosure (838512)

The remote host is running MSN Messenger. The remote host appears to be vulnerable to a remote attack wherein an attacker can read any local file that the victim has 'read' access to. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12091; scriptversion"1.37";...

MS Windows ASN.1 LSASS.EXE Remote Exploit (MS04-007)

Exploit for unknown platform in category dos / poc ==================================================== MS Windows ASN.1 LSASS.EXE Remote Exploit MS04-007 ==================================================== / MS04-007 Exploit LSASS.EXE Win2k Pro Remote Denial-of-Service Copyright C 2004 Christop...

MS Internet Explorer URL Injection in History List (MS04-004)

Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer URL Injection in History List MS04-004 ============================================================= // Andreas Sandblad, 2004-02-03, patched by MS04-004 //...

CVE-2003-1443

Kaspersky Antivirus KAV 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

CVE-2003-1287

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device...

CVE-2003-1267

GuildFTPd 0.999 allows remote attackers to cause a denial of service crash via a GET request for MS-DOS device names such as lpt1...

MS Windows Messenger Service Remote Exploit FR (MS03-043)

Exploit for unknown platform in category remote exploits ========================================================= MS Windows Messenger Service Remote Exploit FR MS03-043 ========================================================= // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / /...

CVE-2003-0622

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service hang via pathname arguments that contain MS-DOS device names such as CON and AUX...

Immunity Canvas: MSXEXCH50

Name| msxexch50 ---|--- CVE| CVE-2003-0714 Exploit Pack| CANVAS Description| MS Exchange 2000 XEXCH50 integer overflow ms03-046 Notes| CVE Name: CVE-2003-0714 VENDOR: Microsoft MSADV: MS03-046 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-046.asp NOTE: CVE Url:...

MS Windows (ListBox/ComboBox Control) Local Exploit (MS03-045)

Exploit for unknown platform in category local exploits ============================================================== MS Windows ListBox/ComboBox Control Local Exploit MS03-045 ============================================================== / \ local ListBox/ComboBox exploit for Win32 / \ Created...