Reflective DLL Injection, Reverse Ordinal TCP Stager (No NX or Win7)

Inject a DLL via a reflective loader. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 93 include Msf::Payload::Stager include Msf::Payload::Windows def...

CVE-2005-2045: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the 1 iChannel parameter to default.asp, 2 iData parameter to detail.asp, 3 iMem parameter to members.asp, 4 iCat parameter to cat.asp, 5 offset parameter to...

msmq_deleteobject_ms05_017.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2004-1955

The CVE-2004-1955 entry describes a SQL injection in the phProfession 2.5 package, specifically via the offset parameter in modules.php. Affected software: phProfession 2.5; vulnerable component: modules.php. Root cause: improper handling of the offset input enables arbitrary SQL execution by rem...

CVE-2004-1955

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter...

CVE-2004-1955: Undefined Security Weakness

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter...

CVE-2004-1925: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in 1 tiki-usermenu.php, 2 tiki-listfilegallery.php, 3 tiki-directoryranking.php, 4 tiki-browsecategories.php, 5 tiki-index.ph...

CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

security flaw

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

PostScript Utilities - psnup Argument Buffer Overflow

Exploit for linux platform in category local exploits ===================================================== PostScript Utilities - psnup Argument Buffer Overflow ===================================================== !/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are...

PostScript Utilities - 'psnup' Local Buffer Overflow

!/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are vulnerable written by lammat just for practice purposes tested against psutils-p17 gdb r -8 perl -e 'print "A"x250' The program being debugged has been started already. Start it from the beginning? y or n y Starting...

security flaw

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...

3CServer 1.1 FTP Server Remote Exploit

No description provided by source. / subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore,...

3CServer 1.1 (FTP Server) - Remote Overflow

/ subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore, mandragore@[email protected] / include...

USN-66-1: PHP vulnerabilities

FraMe from kernelpanik.org reported that the cURL module does not respect openbasedir restrictions. As a result, scripts which used cURL to open files with an user-specified path could read arbitrary local files outside of the openbasedir directory. Stefano Di Paola discovered a vulnerability in...

CVE-2004-1369: Undefined Security Weakness

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

CVE-2004-2592

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service application crash via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines...

CVE-2004-1955

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter...

security flaw

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...