Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

NVR SP2 2.0 (nvUnifiedControl.dll v. 1.1.45.0) SetText() Remote Exploit

No description provided by source. ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF Heap Spray Technique url: http://www.acti.com/index.asp author:...

NVR SP2 2.0 (nvUnifiedControl.dll v. 1.1.45.0) SetText() Remote BoF

No description provided by source. ----------------------------------------------------------------------------------- NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF url: http://www.acti.com/index.asp author: shinnai mail:...

NVR SP2 2.0 'nvUnifiedControl.dll 1.1.45.0' - 'SetText()' Command Execution

------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF Heap Spray Technique url: http://www.acti.com/index.asp author: shinnai mail: shinnaiatautisticidoto...

NVR SP2 2.0 (nvUtility.dll v. 1.0.14.0) DeleteXMLFile() Inscure Method

Exploit for unknown platform in category remote exploits ====================================================================== NVR SP2 2.0 nvUtility.dll v. 1.0.14.0 DeleteXMLFile Inscure Method ======================================================================...

Design/Logic Flaw

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...

CVE-2007-4375

The CVE-2007-4375 entry concerns the administrative interface (DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and likely other versions. A memory comparison function is exposed via RPC over TCP, enabling remote attackers to (1) read process memory contents (e.g., obtain module base...

msvisual-overflow.txt

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

Microsoft Visual 6 (VDT70.DLL NotSafe) Stack Overflow Exploit

No description provided by source. !--============================================================================ Microsoft Visual 6 VDT70.DLL Stack Overflow Exploit DeltahackingSecurityTEAM Bug discovered by D7J...

Microsoft Visual 6 - VDT70.dll NotSafe Remote Stack Overflow

Microsoft Visual 6 - VDT70.dll NotSafe Remote Stack Overflow jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" &...

Microsoft Visual 6 - 'VDT70.dll NotSafe' Remote Stack Overflow

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

CHILKAT ASP String (CkString.dll <= 1.1) SaveToFile() Inscure Method

Exploit for unknown platform in category remote exploits ==================================================================== CHILKAT ASP String CkString.dll ----------------------------------------------------------------------------- CHILKAT ASP String CkString.dll url:...

Sql injection

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Path traversal

Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3983: Undefined Security Weakness

Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...