Here You Have Email Worm Detection

The remote Windows host has files present on the system that indicate that the 'Here You Have' email worm is present. A user of this host likely received an email containing a malicious '.scr' screen saver file and infected the host as a result of running this file. This malware has several...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== Acunetix Web Vulnerability Scanner DLL Hijacking Exploit ======================================================== // Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Dat...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

KnowledgeTree 3.5.2 Community Edition Cross Site Scripting

Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: fdisk Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search criteria, enter your javascript code...

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version: 3.5.2 Notes: Fixed in the last version. Go to search box or search...

HP NNM CGI webappmon.exe OvJavaLocale Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53. By sending a request containing a cookie longer than 5120 bytes, an attacker can overflow a stack buffer and execute arbitrary code. The vulnerable code is within the OvWwwDebug function. The static-sized stack...

HP OpenView Network Node Manager execvp_nc Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01207 or NNM01206 without the SSRT100025 hotfix. By specifying a long 'sel' parameter when calling methods within the 'webappmon.exe' CGI program, an attacker can cause a stack-based buffer overflow...

HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By specifying a long 'arg' parameter when executing the 'jovgraph.exe' CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. This vulnerability is...

aMSN < 0.97.1 Session Hijack Vulnerability - Windows

aMSN is prone to a session hijacking vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-7255: Undefined Security Weakness

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download

Exploit for windows platform in category remote exploits !/usr/bin/perl use LWP::Simple; Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download Exploit Author : Zer0 Thunder if @ARGV $file"; print FILE $result; close FILE; print " File Saved : $file \n\n"; print...

Php 5.3.0 pdflib extension open_basedir bypass

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension required .'; else $PATH = $GET'p'; /The...

Spider Solitaire PoC

No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...

Code injection

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3452: Exposure of Sensitive Information to an Unauthorized Actor

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-0484

Cross-site request forgery CSRF vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi...

CVE-2008-4268

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...

CVE-2008-4268: Undefined Security Weakness

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...

PT-2008-5548 · Microsoft · Windows Server 2008 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists due to improper memory handling during the saving of a search file. This allows attackers to execute arbitrary code via a crafted...