IBM Lotus QuickR qp2 ActiveX Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow vulnerability on the UploadControl ActiveX. The vulnerability exists in the handling of the "AttachmentTimes" property, due to the insecure usage of the swscanf. The affected ActiveX is provided by the qp2.dll installed with the IBM Lotus Quickr...

InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Overflow

This Metasploit module exploits a heap overflow found in InduSoft Web Studio HttpClients::IE, :uaminver = "6.0", :uamaxver = "9.0", :javascript = true, :osname = OperatingSystems::WINDOWS, :rank = NormalRanking, :classid = "3c9dff6f-5cb0-422e-9978-d6405d10718f", :method = "InternationalSeparator"...

EMC Networker Format String Vulnerability

This Metasploit module exploits a format string vulnerability in the lgsprintf function as implemented in liblocal.dll on EMC Networker products. This Metasploit module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06...

Tom Sawyer Software GET Extension Factory Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Tom Sawyer Software GET Extension Factory - Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

IBM Lotus QuickR qp2 ActiveX Buffer Overflow

This module exploits a buffer overflow vulnerability on the UploadControl ActiveX. The vulnerability exists in the handling of the "AttachmentTimes" property, due to the insecure usage of the swscanf. The affected ActiveX is provided by the qp2.dll installed with the IBM Lotus Quickr product. Thi...

InduSoft Web Studio ISSymbol.ocx InternationalSeparator() Heap Overflow

This module exploits a heap overflow found in InduSoft Web Studio use exploit/windows/browser/indusoft/issymbolinternationalseparator msf undefinedissymbolinternationalseparator show actions ...actions... msf undefinedissymbolinternationalseparator set ACTION msf...

Java MixerSequencer Object GM_Song Structure Handling Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Java MixerSequencer Object GM_Song Structure Handling Vulnerability

This module exploits a flaw within the handling of MixerSequencer objects in Java 6u18 and before. Exploitation id done by supplying a specially crafted MIDI file within an RMF File. When the MixerSequencer objects is used to play the file, the GMSong structure is populated with a function pointe...

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

This module exploits a stack based buffer overflow in the Active control file ImageViewer2.OCX by passing an overly long argument to an insecure TifMergeMultiFiles method. Exploitation results in code execution with the privileges of the user who browsed to the exploit page. The victim will first...

Mozilla Firefox Array.reduceRight() Integer Overflow Exploit

No description provided by source. Title: Mozilla Firefox Array.reduceRight Integer Overflow Exploit Date: 12 Oct 2011 Author: Matteo Memelli ryujin -AT- offensive-security.com CVE-2011-2371 Full exploit package: http://www.exploit-db.com/sploits/17974.zip html head titleff-i-3-u/title /head body...

Mozilla Firefox Array.reduceRight() Integer Overflow Exploit

Exploit for windows platform in category remote exploits Title: Mozilla Firefox Array.reduceRight Integer Overflow Exploit Date: 12 Oct 2011 Author: Matteo Memelli ryujin -AT- offensive-security.com CVE-2011-2371 Full exploit package: http://www.exploit-db.com/sploits/17974.zip ff-i- Title: Mozil...

HP OmniInet.exe Opcode 20 Buffer Overflow

$Id: hpomniinet4.rb 13092 2011-07-04 17:02:40Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Tom Sawyer Software GET Extension Factory Remote Code Execution

This module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control installed with Tom Sawyer GET Extension Factory due to an incorrect initialization under Internet Explorer. While the Tom Sawyer GET Extension Factory is installed with some versions of VMware...

HP Data Protector Manager A.06.11 MMD - Null Pointer Dereference Denial of Service

HP Data Protector Manager A.06.11 MMD - Null Pointer Dereference Denial of Service !/usr/bin/perl ================================= HP Data Protector Manager A.06.11 ================================= Bug: NULL Pointer Dereference Remote Denial of Service Vulnerability Software:...

HP Data Protector Manager A.06.11 MMD - Null Pointer Dereference Denial of Service

!/usr/bin/perl ================================= HP Data Protector Manager A.06.11 ================================= Bug: NULL Pointer Dereference Remote Denial of Service Vulnerability Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date:...

HP Data Protector Manager v6.11 / NULL Pointer Dereference Remote Denial of Service Vulnerabilities

=============================== HP Data Protector Manager v6.11 =============================== Bug: NULL Pointer Dereference Remote Denial of Service Vulnerabilities Software: http://www.hp.com Date: 06/10/2010 Author: Pepelux - pepeluxATenye-secDOTcom http://www.enye-sec.org -...

HTMLDOC html文件处理栈溢出漏洞

BUGTRAQ ID: 35727 HTMLDOC是用于将HTML文件和网页转换为适合在线查看和打印的索引HTML、PostScript和PDF文件的工具。 HTMLDOC的htmldoc/util.cxx文件中的sscanf和setpagesize函数存在栈溢出漏洞。如果用户受骗打开了包含有特制MEDIA SIZE标注的HTML文档的话，就可以触发这个溢出，导致执行任意指令。 Easy Software Products HTMLDOC 1.8.27 厂商补丁： Easy Software Products ----------------------...

Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities

Microsoft Works - Buffer Overflows / Denial of Service DoS-Vulnerabilities ... discovered by Benjamin Tobias Franz Affected Vendor: Microsoft Affected Product: Microsoft Works Description: Microsoft Works Spreadsheet wksss.exe fails to handle specially crafted files. All supported file formats...