9531 matches found
Microsoft SQL Server 2000 Resolution Service Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5310/info A vulnerability in Microsoft SQL Server 2000 could allow remote attackers to access target hosts. A problem in the SQL Server Resolution Service allows a remote attacker to execute arbitrary code on a vulnerable...
Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow
No description provided by source. $Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Media Player classic StatsReader (.stats file) stack buffer Overflow PoC
No description provided by source. ! /usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web:...
Zinf 2.2.1 - Local Buffer Overflow Exploit
No description provided by source. / -------------------------------Advisory---------------------------------- Luigi Auriemma aluigiaaaattttttautisticiD000torg I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version ...
IBM DB2 < 9.5 pack 3a - Connect Denial of Service Exploit
No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 50000 sockobj.send...
Portal Pack 6.0 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17628/info Portal Pack is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
superengine CMS (Custom Pack) SQL Injection Vulnerability
No description provided by source. || | / \ / / | | \ / \ / / \ \ /\ /| | |/ | \ / \ / ||/ /|| /\ / / / / .org Author: 10n1z3d 10n1z3datwdotcn Date: 15/02/2010 --------------------------------------------------------- superengine CMS Custom Pack SQL Injection Vulnerability...
ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)
No description provided by source. $Id: proftpsreplace.rb 11526 2011-01-09 23:33:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
WinXP SP2 Fr Download and Exec Shellcode
No description provided by source. Exploit Title winxp sp2 fr download & exec :: Date 06/5/2010 Author : CrackMaN :: code: ;------------------------------------------- .586 .model flat,stdcall option casemap:none include windows.inc include user32.inc include kernel32.inc include shell32.inc...
MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1109/info The dvwssr.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack has a remotely exploitable buffer overflow. This attack will result in the service no longer accepting...
MP3 Workstation 9.2.1.1.2 - SEH exploit
No description provided by source. MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain ...
Windows Server 2008 R1 Local Denial of Service
No description provided by source. Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc4 echo Usage: php...
MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel PoC
No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...
MS Windows GDI+ - Proof of Concept (MS08-052) (2)
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
Media Player 6.4.9.1 with K-Lite Codec Pack - DoS/Crash (.avi)
No description provided by source. Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vist...
Internet Explorer 4.0,Outlook 2000/5.5 MSHTML.DLL Crash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2202/info MSHTML.DLL is the shared library for parsing HTML in Internet Explorer and related applications. It may be possible for an attacker to crash this library remotely and cause a denial of service with special Jscri...
Microsoft Windows XP TSShutdn.exe Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12889/info Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer. A remote attacker uses the TSShutdn.exe command to...
Real Networks RealJukebox 1.0.2/RealOne 6.0.10 Player Gold Skinfile Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/5217/info Real Software has announced a vulnerability in RealJukebox2 and Real Player Gold. A buffer overflow condition exists due to insufficient bounds checking of fields in skinfiles. There is an unchecked buffer for t...
Microsoft Internet Explorer 6 URI Handler Restriction Circumvention Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5730/info Microsoft Windows Internet Explorer 6.0 SP1 introduced restrictions for certain URI handlers such as file:// and res://. It has been demonstrated in the past that these URI handlers could be abused and...