pfSense - (Authenticated) Group Member Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSense authenticated group member RCE', 'Description' = %q pfSense, a free BSD based open source firewall distribution, version 's4squatch',...

X-Cart Pro 4.0.13 - SQL Injection Proof of Concept

No description provided by source. X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer PoC

No description provided by source. html object classid='clsid:B5ED1577-4576-11D5-851F-00D0B7A934F6' id='target' //object script language='vbscript' 'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry BOF

No description provided by source. html object classid='clsid:3A86F1F2-4921-4C75-AF2C-A1AA241E12BA' id='target'/object script language='vbscript' 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit...

Cisco Collaboration Server 5 XSS, Source Code Disclosure

No description provided by source. Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

Magneto Net Resource ActiveX 4.0.0.5 - NetConnectionEnum Exploit (Universal)

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX v4.0.0.5 NetConnectionEnum SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch -...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetShareEnum SEH Overwrite PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetShareEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10...

Magneto Software Net Resource Active-X 4.0.0.5 NetFileClose Universal SEH Exploit

'Magneto Software Net Resource ActiveX v4.0.0.5 NetFileClose SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12206 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'SKNetResource.ocx 'Function NetFileClose...

MagnetoSoft NetworkResources ActiveX NetConnectionEnum SEH Overwrite POC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetConnectionEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered:...

MagnetoSoft SNTP Active-X SntpSendRequest Crash Proof Of Concept

'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notifie...

MagnetoSoft DNS Active-X DNSLookupHostWithServer Proof Of Concept

'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE 'Published 04/13/10 'www:...

MagnetoSoft NetworkResources Active-X NetFileClose SEH Overwrite

'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite SEH PoC 'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash (PoC)

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC 'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download:...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer (PoC)

'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE 'Published 04/13/10 'www:...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash (PoC)

'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notifie...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel (PoC)

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel PoC 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...