Design/Logic Flaw

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.5 SP0, 5.5 SP0b, 5.5.1, and 6.0.0 allows remote authenticated user...

Code injection

zenAdminSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted packet to TCP port 50777, aka Reference Number 25240...

Code injection

ZenSysSrv.exe in Ing. Punzenberger COPA-DATA zenon 6.51 SP0 allows remote attackers to cause a denial of service service crash or possibly execute arbitrary code via a series of connections and disconnections on TCP port 1101, aka Reference Number 25212...

CVE-2011-4533

CVE-2011-4533 affects Ing. Punzenberger COPA-DATA zenon 6.51 SP0. The DoS vulnerability (daemon crash) and potential arbitrary code execution are triggered by a crafted packet to zenAdminSrv.exe on TCP port 50777; a second DoS vector via ZenSysSrv.exe on port 1101 is noted in ICS-CERT materials. ...

under windows ie_iepeers. dll after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Vulnerability details please view: ms10018, the http://technet.microsoft.com/en-us/security/bulletin/MS10-018 The key, if metasploit was not this exploit, where you can download: http://www.rec-sec.com/index.php Here also posted about it: this ruby code is saved directly to the...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

Exploit for windows platform in category local exploits $Id: cytelstudiocy3.rb 14041 2011-10-24 01:39:11Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Sunway Force Control SCADA 6.1 SP3 SEH Overwrite

Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez: other payloads not working stable...

Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit

Exploit for windows platform in category remote exploits Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat...

Sunway Force Control SCADA 6.1 SP3 - 'httpsrv.exe' Remote Overflow

Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez: other payloads not working stable...

Golden FTP 4.70 PASS Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: GoldenFTP 4.70 PASS exploit Date: July 5, 2011 Author: Joff Thyer email protected / / Software Link: http://www.goldenftpserver.com/ Version: 4.70 Tested on: WinXP-SP0/SP2/SP3 CVE: 2006-6576 based on exploit...

Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...

IBM Lotus Domino iCalendar MAILTO Buffer Overflow

This module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to...

IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)

$Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Inetserv 3.23 - SMTP Denial of Service

Inetserv 3.23 - SMTP Denial of Service !/usr/bin/python Exploit Title: Inetserv 3.23 SMTP DoS Date: 1/22/2011 Author: G13 Software Link: http://www.avtronics.net/inetserv.php Version: 3.23 Tested on: WinXP SP0 Eng import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = "EXPN " +...

Webster HTTP Server GET Buffer Overflow

This exploits a stack buffer overflow in the Webster HTTP server. The server and source code was released within an article from the Microsoft Systems Journal in February 1996 titled "Write a Simple HTTP-based Server Using MFC and Windows Sockets". This module requires Metasploit:...

CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (3)

$Id: lgserverrxrlogin.rb 10892 2010-11-03 22:09:44Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

RealPlayer - 'rmoc3260.dll' ActiveX Control Heap Corruption (Metasploit)

$Id: realplayerconsole.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook Express - NNTP Response Parsing Buffer Overflow (MS05-030) (Metasploit)

$Id: ms05030nntp.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Novell NetMail 3.52d - IMAP Subscribe Buffer Overflow (Metasploit)

$Id: novellnetmailsubscribe.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflow

$Id: barcodeax49.rb 8466 2010-02-12 18:06:49Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...