Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]

Exploit for windows platform in category dos / poc Exploit Title: MS09-053 Microsoft IIS FTP Server Software Link: http://www.microsoft.com/ Version: 5.0 - 7.0 Tested on: unpatched version of windows xp & 2k3 This file is part of the Metasploit Framework and may be subject to redistribution and...

IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow

Added: 06/30/2011 CVE: CVE-2011-1213 BID: 48018 OSVDB: 72706 Background Lotus Notes is the client for Lotus Domino servers. Problem IBM Lotus Notes File Viewer is vulnerable to remote code execution as a result of a stack buffer overflow while parsing headers of LZH files. A remote, unauthenticat...

VideoLAN VLC Media Player MKV Demuxer Code Execution

Added: 06/27/2011 CVE: CVE-2011-0531 BID: 46060 OSVDB: 70698 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficien...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh attachment)

No description provided by source. $Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview

$Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Sielco Sistemi Winlog Buffer Overflow

$Id: winlogruntime.rb 13000 2011-06-21 22:42:53Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lotus Notes 8.0.x - 8.5.2 FP2 - Autonomy Keyview (.lzh attachment)

Exploit for windows platform in category remote exploits $Id: lotusnoteslzh.rb 13015 2011-06-23 15:43:54Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Exploit for windows platform in category remote exploits $Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

FactoryLink vrn.exe Opcode 9 Buffer Overflow

Exploit for windows platform in category remote exploits $Id: factorylinkvrn09.rb 12998 2011-06-21 21:08:57Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Sielco Sistemi Winlog Buffer Overflow

Exploit for windows platform in category remote exploits $Id: winlogruntime.rb 13000 2011-06-21 22:42:53Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Sielco Sistemi Winlog - Remote Buffer Overflow (Metasploit)

$Id: winlogruntime.rb 13000 2011-06-21 22:42:53Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Black Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

MS11-050 IE mshtml!CObjectElement Use After Free

Exploit for windows platform in category remote exploits $Id: ms11050mshtmlcobjectelement.rb 12962 2011-06-17 01:56:20Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Microsoft Internet Explorer - MSHTML!CObjectElement Use-After-Free (MS11-050) (Metasploit)

$Id: ms11050mshtmlcobjectelement.rb 12962 2011-06-17 01:56:20Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MPlayer - .SAMI Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

MPlayer - .SAMI Subtitle File Buffer Overflow DEP Bypass Metasploit require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the...

MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the parsing of an overly long string found in a malicious SAMI subtitle...

IBM Tivoli Endpoint Manager POST Query Buffer Overflow

$Id: ibmtivoliendpointbof.rb 12925 2011-06-12 00:04:55Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IBM Tivoli Endpoint Manager POST Query Buffer Overflow

Exploit for windows platform in category remote exploits $Id: ibmtivoliendpointbof.rb 12925 2011-06-12 00:04:55Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute

Exploit for windows platform in category remote exploits $Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...