3145 matches found
win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes
Exploit for win32 platform in category shellcode ============================================================= win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes ============================================================= / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi...
Discuz!NT 2.5 showuser.aspx注入漏洞
No description provided by source...
win32 connectback, receive, save and execute shellcode
No description provided by source. ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by loco ; All Rights Reserved ; ; NOTE: Compatible with Windows NT based operating systems. IPv4 only. ; ; .386 .model flat, stdcall option casemap:none assume fs:flat include...
win32 connectback, receive, save and execute shellcode
Exploit for win32 platform in category shellcode ====================================================== win32 connectback, receive, save and execute shellcode ====================================================== ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by...
win32 connectback, receive, save and execute shellcode
win32 connectback, receive, save and execute shellcode. Shellcode exploit for win32 platform ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by loco ; All Rights Reserved ; ; NOTE: Compatible with Windows NT based operating systems. IPv4 only. ; ; .386 .model flat...
MS00-094 Microsoft IIS Phone Book Service Overflow
This is an exploit for the Phone Book Service /pbserver/pbserver.dll described in MS00-094. By sending an overly long URL argument for phone book updates, it is possible to overwrite the stack. This module has only been tested against Windows 2000 SP1. This module requires Metasploit:...
Citrix MetaFrame Privilege Escalation
INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ http://www.security.org.br/ ADVISORY/1907 - Citrix MetaFrame Privilege Escalation PRIORITY: Low I - INTRUDERS: ---------------- Intruders Tiger Team Security http://www.intruders.com.br/ is a SecurityLabs...
Microsoft SQL Server Xp_sprintf 缓冲区溢出
Microsoft SQL Server 6.5Service Pack 5以前的版本中有一个存储过程xpsprintf存在一个 缓冲区溢出问题。攻击者可以使用这个存储过程使服务器崩溃，并可能在运行SQL server的系统 中获得管理员控制权限。 Microsoft SQL Server 6.5 Microsoft SQL Server 6.0 - Microsoft Windows NT 4.00 更新到更高版本的SQL Server6.5...
MS00-049:Microsoft Office 脚本允许远程保存恶意文件
如果一个Web站点在web页面中嵌入恶意脚本,它调用一个Excel 2000或者PowerPoint文件， 当用户访问这个站点时可能导致一个远程文件可能是恶意的被保存到该用户的硬盘上。 Microsoft Excel 2000 Microsoft PowerPoint 2000 Microsoft PowerPoint 97.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 微软已经提供了补丁程序： Microsoft Excel...
Microsoft IE 5.01/5.5 DHTMLED远程文件读取漏洞
Microsoft IE 5.5/5.01中DHTMLED（动态HTML编辑控制）部分的实现存在安全问题。可能允许 一个恶意站点非法读取远程客户主机上的已知文件的内容。这种攻击也可以通过发送HTML格式的 邮件给那些使用Outlook的用户来实现。 动态HTML编辑控制是一种让IE具有WYSIWYG HTML编辑器功能的机制。然而DOM安全模型没有正确 处理通过DHTMLED来使用IFRAME的情况，导致IFRAME的内容可以被重定向到某个web server IFRAME可以被设置为从已知的本地文件读取。下面是一个例子代码： dh.DOM.all.I1.focus;...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
Outlook Express 6 恶意附件保护绕过漏洞
BUGTRAQ ID: 3271 微软OutLook Express 6中带了一个新的安全特性，额可以阻止用户打开或者保存可能有 害的附件。 然而，这个特性存在一个漏洞。攻击者可以通过在邮件中嵌入一个frame来绕过上述保护。 当攻击者在frame中嵌入一个".exe"或者“.bat"文件时，如果用户试图打开这个文件，恶 意程序可能被执行。用户也可以将其保存在硬盘上。 Microsoft Outlook Express 6.0 - Microsoft Windows ME - Microsoft Windows 98se - Microsoft Windows 98 - Microsof...
Microsoft Internet Explorer New ActiveX对象字符串串联内存破坏漏洞
BUGTRAQ ID: 30219 CNCAN ID：CNCAN-2008071510 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer new ActiveX对象处理存在内存破坏，远程攻击者可以利用漏洞对程序进行拒绝服务攻击，可能导致任意代码执行。 构建使用New ActiveX对象字符串的串联，当Internet Explorer解析时可导致应用程序崩溃，通过使用Javascript aka heapspray填充内存的方法可控制堆，导致以应用程序权限执行任意指令。 Microsoft...
forumpayperpost-sql.txt
-+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...
Forum Pay Per Post Exchange <= 2.0 (catid) SQL Injection Vulnerability
No description provided by source. -+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...
Telephone Directory 2008 Arbitrary Delete Contact Exploit
No description provided by source. !/usr/bin/perl -w Telephone Directory 2008 = Arbitrary Delete Contact Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya...
HP Web JetAdmin 6.5 (connectedNodes.ovpl) Remote Root Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; This is an exploit for HP Web JetAdmin, the printer management server from HP. It is NOT about printers! The service usually runs on port 8000 on Windows, Solaris or Linux boxes. Greetz: The Phenoelit People, c-base crew, EEyE rock...
Multiple Cisco Products Vulnerabilities Exploit (Cisco Global Exploiter)
No description provided by source. !/usr/bin/perl Cisco Global Exploiter Legal notes : The BlackAngels staff refuse all responsabilities for an incorrect or illegal use of this software or for eventual damages to others systems. www blackangels it Modules use Socket; use IO::Socket; Main ...
MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)
No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...
Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net
Haiyang the webshell has a switch is to control what logged in webshell. Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...