Microsoft Internet Explorer HTML Element Cross Domain Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow...

CVE-2008-4510

Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...

CVE-2008-4510

CVE-2008-4510 affects Microsoft Windows Vista, including Home and Ultimate Edition SP1 and earlier. The vulnerability is a local denial of service: an attacker can induce a page fault and system crash by making multiple attempts to access a virtual address in a PAGE_NOACCESS memory page. The desc...

Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)

EMRCOLORMATCHTOTARGETW stack buffer overflow exploit By Ac!dDrop This is one of the 2 Vulnerabilities of MS08-021 Tested on Windows xp professional SP1 GDi32.dll 5.1.2600.1106 kernel32.dll 5.1.2600.1106 ws232.dll 5.1.2600.0 calc.zip--- executes calculator IE.zip and localhost.zip ------ connects ...

Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS

Some days ago i have discovered a DoS in Windows Vista. Here is the advisory with a detailed description about the vulnerability that will help to Microsoft they have been already notified about the bug to correct it as soon as possible, and it will help you if you need to add any rule for your...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...

CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit (meta)

No description provided by source. $Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

citect_scada_odbc.rb.txt

$Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ msfcli...

CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits =================================================================== CitectSCADA ODBC Server Remote Stack Buffer Overflow Exploit meta =================================================================== $Id: citectscadaodbc.rb This file is...

CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)

CitectSCADA ODBC Server - Remote Stack Buffer Overflow Metasploit $Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-3893

CVE-2008-3893 affects Microsoft BitLocker in Windows Vista prior to SP1. The issue arises because pre-boot authentication passwords are stored in the BIOS keyboard buffer and the buffer is not cleared during boot, allowing local users to read memory locations and potentially recover sensitive inf...

FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)

!/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using flash9f.ocx. use warnings; use strict; use IO::Socket; win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x6b"...

Microsoft Windows IPsec信息泄露漏洞（MS08-047）

BUGTRAQ ID: 30634 CVECAN ID: CVE-2008-2246 Microsoft Windows是微软发布的非常流行的操作系统。 在从Windows Server 2003域向Windows Server 2008域导入IPsec策略时，系统可能会忽略IPsec策略，这样会以明文传输本应加密的数据。导致泄露在网络上本应被加密的信息，查看网络通讯的攻击者能够查看并且可能修改通讯的内容。请注意此漏洞不允许攻击者直接执行代码或提升他们的用户权限，但可能用于收集有用的信息，从而试图进一步入侵受影响的系统或网络。 Microsoft Windows Vista SP1...

CVE-2008-1455

A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted...

Novell iManager < 2.7 SP1 Property Book Pages Arbitrary Plug-in Studio Deletion

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user. %NASLMINLEVEL 70300 C Tenable Network Securit...

MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit

No description provided by source. / Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit Bug discoveried by iDEFENSE Security http://www.idefense.com Exploit coded By ATmaCA Copyright ?2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...

Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）

BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

Microsoft Windows蓝牙栈远程代码执行漏洞（MS08-030）

BUGTRAQ ID: 29522 CVECAN ID: CVE-2008-1453 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的蓝牙栈没有正确地处理服务描述请求，如果远程攻击者以很快地速度向有漏洞的系统发送了大量特制的SDP报文的话，就可能以提升的权限运行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除日期；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...