Wonderware InBatch ActiveX Vulnerabilities

Overview ICS-CERT originally released advisory “ICSA-11-332-01P—Invensys Wonderware InBatch ActiveX Vulnerabilities” in the US-CERT secure portal on November 28, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the...

MapServer 6.0 - '.Map' File Double-Free Remote Denial of Service

source: https://www.securityfocus.com/bid/49374/info MapServer is prone to a remote denial-of-service vulnerability due to a double free condition. Attackers can exploit this issue to crash the application, denying service to legitimate users. Due to the nature of this issue, code execution may b...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

Freefloat FTP Server "Response" Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Free Float FTP server Response stack Buffer Overflow Exploit Date: 21-08-2011 Author: Debasish Mandal http://www.facebook.com/raza.whitehat Software Link: http://www.freefloat.com/sv/freefloat-ftp-server/freefloat-ftp-server.p...

GILE Internet Solutions SQL Injection

Exploit Title: GILE internet solutions Exploit http://localhost/path/newsdetail.php?NewId=1' http://localhost/path/newsdetail.php?NewId=inject here Demos http://www.kangfu.com.tw/newsdetail.php?NewId='4 http://www.sprites.com.tw/newsdetail.php?NewId='4...

Microsoft Windows TCP/IP ICMP CVE-2011-1871 Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to restart the affected system, therefore denying service to legitimate users. Technologies Affected Avaya Conferencing Standard Edition 6.0 Avaya Conferencing Standard Edition 6...

Acoustica Mixcraft 1.00 - Local Crash

Acoustica Mixcraft 1.00 - Local Crash !/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x...

Microsoft Windows DNS Server Uninitialized Memory Remote Denial of Service Vulnerability

Description The Microsoft Windows DNS Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the DNS server service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition...

Acoustica Mixcraft 1.00 Denial Of Service

!/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ; opend99y,"$file"; print d99y...

Acoustica Mixcraft 1.00 - Local Crash

!/usr/bin/perl print q home : http://www.D99Y.com Date : 9/8/2011 Author : NassRawI Software Link : http://www.acoustica.com/mixcraft/ Version : v1.00 Build 10 Tested on : Windows XP SP2 ; my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ; opend99y,"$file"; print d99y...

LiteServe 2.81 - 'PASV' Denial of Service

!/usr/bin/python Title: LiteServe 2.81 PASV Command DoS Author: Craig Freyman @cd1zz Date: Bug found July 25, 2011 - Vendor approved release August 7, 2011 Tested on Windows XP SP3 and Server 2003 SP2 Software: http://www.cmfperception.com/liteserve.html Notes: In certain conditions that I could...

Ruby随机数字生成本地拒绝服务漏洞

BUGTRAQ ID: 49015 CVE ID: CVE-2011-2686 Ruby是一种功能强大的面向对象的脚本语言。 Ruby在处理随机数字生成的实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成拒绝服务。 Yukihiro Matsumoto Ruby 1.8.7 x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/ !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Serv...

Omnicom Alpha 4.0e LPD Server Denial Of Service

!/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendor Notified 8/1/2011, Vendor Responded 8/2/2011,...

Braden Fleischer SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Braden Fleischer..SQL injection Vulnerability + Date : 28/07/2011 + Author : k's0uR! + Category : WebApps + d0rk : "site by: Braden Fleischer" + Faceb00k :...

Wireshark 1.4.0 Malformed IKE Packet Denial of Service

Wireshark 1.4.0 Malformed IKE Packet Denial of Service ------------------------------------------------------------------ I. Summary A flaw has been identified in Wireshark 1.4.0 when send a specific malformed IKE packet that will cause a denial of service...

CVE-2011-1883

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-1884

CVE-2011-1884 describes a use-after-free vulnerability in the Windows kernel‑mode driver component win32k.sys. The flaw arises from incorrect management of driver objects in the Win32k subsystem, enabling a local attacker to gain privileges by running a crafted application. Affected platforms inc...

PT-2011-3443 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

Ileys Technology Inc.. SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Exploit Title : Ileys Technology Inc.. SQL injection Vulnerability + Date : 1 0 June 2 0 1 1 + Author : k's0uR! + Category : WebApps + d0rk : "Site Designed & Developed by: Ileys Technology Inc" + Faceb00k : + Tested on : Windows Xp SP2 ?????????????? + Virus: ??...