MagnetoSoft SNTP ActiveX SntpGetReply BOF

Exploit for windows platform in category remote exploits ========================================= MagnetoSoft SNTP ActiveX SntpGetReply BOF ========================================= 'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name =...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash (PoC)

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC 'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel (PoC)

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel PoC 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite SEH PoC 'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply Buffer Overflow

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply Buffer Overflow 'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name = SKSntp.ocx 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel (PoC)

'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download: http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe 'Vendo...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash (PoC)

'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notifie...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer (PoC)

'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE 'Published 04/13/10 'www:...

MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC

Exploit for windows platform in category dos / poc =================================================================== MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC =================================================================== 'Magneto Software Net Resource ActiveX...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetShareEnum Overwrite (SEH) (PoC)

'Magneto Software Net Resource ActiveX NetShareEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

RSA SecurID XSS Vulnerability

No description provided by source. view source print? Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009 Version: Unknown -- DLL does not contain version, therefore vendor says it is outdated and not...

X-Cart Pro 4.0.13 SQL Injection

Title: X-Cart Pro v4.0.13 SQL Injection Proof of Concept Author: s4squatch Published: 2010-02-11 X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from...

RSA - SecurID Cross-Site Scripting

RSA - SecurID Cross-Site Scripting Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009 Version: Unknown -- DLL does not contain version, therefore vendor says it is outdated and not supported. POC:...

RSA SecurID XSS Vulnerability

Exploit for unknown platform in category web applications ============================= RSA SecurID XSS Vulnerability ============================= Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009...

X-Cart Pro v4.0.13 SQL Injection Proof of Concept

Exploit for unknown platform in category web applications ================================================= X-Cart Pro v4.0.13 SQL Injection Proof of Concept ================================================= X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState...

Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure

Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering -- http://www.cisco.com/en/US/products/sw/custcosw/ps747/prodeolnotice09186a008032d4d0.html Replaced with:...

X-Cart Pro 4.0.13 - SQL Injection

X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere... Ref's:...

RSA - SecurID Cross-Site Scripting

Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009 Version: Unknown -- DLL does not contain version, therefore vendor says it is outdated and not supported. POC:...

Microsoft HTML Help Compiler (hhc.exe) BOF POC

No description provided by source. Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments...