MySQL 4.x/5.0 (Windows) - User-Defined Function Command Execution

-- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat UDF on port -- 80/tcp or to execute single OS commands exec UDF...

Microsoft Internet Explorer多个ActiveX控件拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer包含的多个ActiveX控件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Determina Security Research发现当部分对象属性通过JavaScript访问时，多个控件会由于非法内存访问异常而导致应用程序崩溃。多数受影响ActiveX控件存在于MSHTML.dll中，这些ProgIDs包括如下： giffile htmlfile jpegfile mhtmlfile ODCfile pjpegfile pngfile...

Medium Risk Vulnerability in PGP Desktop

Peter Winter-Smith of NGSSoftware has discovered a medium risk vulnerability in PGP Desktop which can allow a remote authenticated attacker to execute arbitrary code on a system on which PGP Desktop is installed. The vulnerability resides within the Windows Service which PGP Desktop installs whic...

[Full-disclosure] Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2 ActiveX Control Buffer Overflow

====================================================================== Secunia Research 24/01/2007 - Sienzo Digital Music Mentor - - NCTAudioFile2 ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA23700] Sun Solaris rpcbind Denial of Service

TITLE: Sun Solaris rpcbind Denial of Service SECUNIA ADVISORY ID: SA23700 VERIFY ADVISORY: http://secunia.com/advisories/23700/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solaris 8 http://secunia.com/product/94/...

WMF CreateBrushIndirect vulnerability (DoS)

The following WMF exploit appeared on milw0rm today: http://www.milw0rm.com/exploits/3111 The vulnerability is a result of the WMF parser passing a value from the file as a pointer argument to the CreateBrushIndirect function. The function dereferences the pointer and dies with an access violatio...

Interview:USSR

USSR Labs USSR Labs their website , their slogan is "USSR is back", that is, "USSR is back", their symbol is a bulldog in a strict collar broke into the world of computer security relatively recently, but very decisive. Somewhere, probably last fall interview taken in 2000 - editor's note, they...

csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit

Hi, For those researchers who are interested in the Csrss Double-Free vulnerability, I have coded an arbitrary DWORD overwrite exploit. This flaw is hard to exploit at least for me due to the the "fail-and-die" situation. Corrupting the heap in a process like Csrss is dangerous. However, by...

sitecatalyst-xss.txt

Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: SiteCatalyst Web Login Cross Site Vulrnabilities Risk: Medium Omniture, Inc aims its aperture at your Web site. The company provides Internet analytic software and services to corporate customers such as AOL...

AstonSoft DeepBurner 1.8.0 - '.dbr' File Parsing Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 18\12\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

[Full-disclosure] Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow

====================================================================== Secunia Research 18/12/2006 - MailEnable POP Service "PASS" Command Buffer Overflow - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Internet Explorer Script Error Handling Memory Corruption

====================================================================== Secunia Research 12/12/2006 - Internet Explorer Script Error Handling Memory Corruption - ====================================================================== Table of Contents Affected...

[SA23201] MailEnable IMAP Service Buffer Overflow Vulnerability

TITLE: MailEnable IMAP Service Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA23201 VERIFY ADVISORY: http://secunia.com/advisories/23201/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MailEnable Professional 2.x http://secunia.com/product/10625/ MailEnable...

EEYE: Intel Network Adapter Driver Local Privilege Escalation

eEye Research - http://research.eeye.com Intel Network Adapter Driver Local Privilege Escalation Release Date: December 7, 2006 Date Reported: July 10, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows 2000, XP, 2003, Vista Intel PRO 10/100 - 8.0.27.0 or previou...

VWar <= 1.50 R14 (online.php) Remote SQL Injection Vulnerability

No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 1o.o8.2oo6 .. Affected Application: VWar = v1.50 R14 . . : contact :...

SAPID CMS <= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit

No description provided by source. Title: SAPID CMS Multiple remote Command Execution Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 Published : 08 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website :...

EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability

eEye Research - http://research.eeye.com Adobe Download Manager AOM Stack Buffer Overflow Vulnerability Release Date: December 5, 2006 Date Reported: November 10, 2006 Severity: High Code Execution Systems Affected: Adobe Download Manager 2.1.x and earlier Overview: eEye Digital Security has...

Mambo Remository Component <= 3.25 Remote Include Vulnerability

No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: o9.o8.2oo6 .. Affected Application: Remository v3.25 Mambo/Joomla CMS Component...

PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection Exploit

No description provided by source. Title: PHPMyRing's viewcom.php Remote SQL injection Exploit Vendor: phpmyring webiste : http://phpmyring.sourceforge.net/ Version : = 4.2.0 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben youssef simoatmorxorg Discovered: 0...