CVE-2010-0262

Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record...

RhinoSoft Serv-U FTP Server - Session Cookie Buffer Overflow (Metasploit)

$Id: servusessioncookie.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PHP File Uploader Upload Vulnerability

Exploit for unknown platform in category web applications ====================================== PHP File Uploader Upload Vulnerability ====================================== ======================================================================================== | Title : PHP File Uploader Uploa...

Flare <= 0.6 Local Heap Overflow DoS

Exploit for multiple platform in category dos / poc ==================================== Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

No description provided by source. Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A...

Dosya Yukle Scrtipi v1.0 Shell Upload Vulnerability

Exploit for unknown platform in category web applications =================================================== Dosya Yukle Scrtipi v1.0 Shell Upload Vulnerability ===================================================...

PHP Advanced Transfer Manager 1.10 Shell Upload

======================================================================================== | Title : PHP Advanced Transfer Manager v1.10 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by PHP Advanced Transfer Manager v1.10 - @2002 Bugada Andrea |...

Uploadify Sample Collection Shell Upload

======================================================================================== | Title : Uploadify Sample Collection Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

Uploadify Sample Collection Shell Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== Uploadify Sample Collection Shell Upload Vulnerability ======================================================...

Windows Xp Home Edition SP2 English calc.exe 37 bytes

Windows Xp Home Edition SP2 English calc.exe 37 bytes. Shellcode exploit for win32 platform / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil =...

PBBoard 2.0.5 Add Administrator / Shell Upload

======================================================================================== | Title : PBBoard Version 2.0.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : http://www.pbboard.com/PBBoardv2.0.5.zip | Dork : Powered by...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

File Explorer V1.2.2 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== File Explorer V1.2.2 Remote Shell Upload Vulnerability ======================================================...

Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities

======================================================================================== | Title : Web Server Creator - Web Portal v 0.1 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...

Max's Photo Album Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================ Max's Photo Album Shell Upload Vulnerability ============================================ ======================================================================================== | Title : Max's...

Winamp 5.57 - 'Browser' IE Denial of Service

From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento, to open browser press ALT + X drag or load file to browser and keep smile : +---------------------------------------------------------------------------------+ Proud to be Muslim --...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

Apple iTunes 9.0.1 - '.pls' Handling Buffer Overflow

Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224 JMPBUF = 0x8fe31290 STRDUP = 0x92EED110 8fe24459 jmp...

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224...

Netscape Navigator 9 Remote Local DOS exploit

Exploit for unknown platform in category dos / poc ============================================= Netscape Navigator 9 Remote Local DOS exploit ============================================= \n" File.write"\n" Bof = 'A'66666 File.write"alert'"+Bof+"'\n" File.write"\n" File.write"" File.close --...