Microsoft Internet Explorer - createTextRang Remote (Metasploit)

Microsoft Internet Explorer - createTextRang Remote Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

MS Internet Explorer (createTextRang) Remote Exploit (meta update)

Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer createTextRang Remote Exploit meta update ================================================================== This file is part of the Metasploit Framewo...

Buffer overflow

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method...

CVE-2006-1510

CVE-2006-1510 describes a buffer overflow in calloc.c within Windows XP SP2 ntdll.dll that is triggered when the ILDASM disassembler is used from the .NET 1.0/1.1 SDK. A crafted DLL file with a large static method could allow user‑assisted attackers to execute arbitrary code. The description spec...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

Design/Logic Flaw

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1476

Windows Firewall in Microsoft Windows XP SP2 is affected by an issue where the firewall produces incorrect application block alerts when the application filename is “.exe” (no characters before the dot). This can enable local user-assisted actions to trick a user into unblocking a Trojan horse pr...

CVE-2006-1476

Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" with no characters before the ".", which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious...

Microsoft Internet Explorer - createTextRang Remote Code Execution

Microsoft Internet Explorer - createTextRang Remote Code Execution shellcode = unesc...

Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)

Microsoft Windows Media Player 9 - Plugin Overflow MS06-006 Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the...

Microsoft Windows Media Player 10 - Plugin Overflow (MS06-006)

WMP Plugin EMBED Exploit // Windows Media Player Plug-In EMBED Overflow Universal Exploit MS06-006 // By Matthew Murphy [email protected] // // DISCLAIMER: // // This exploit code is intended only as a demonstration tool for // educational or testing purposes. It is not intended to be used for...

Microsoft Windows Media Player 7.1 10 - .BMP Heap Overflow (PoC) (MS06-005) (1)

Microsoft Windows Media Player 7.1 10 - .BMP Heap Overflow PoC MS06-005 1 / For Remote Exploration hint: http://www.spyinstructors.com/atmaca/research/wmpremotepoc.asx / / Windows Media Player BMP Heap Overflow MS06-005 Bug discovered by eEye -...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (3)

Exploit for unknown platform in category local exploits ==================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit 3 ==================================================================== / \ Windows HTML Help Workshop Index...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)

/ \ Windows HTML Help Workshop Index File Stack Overflow Exploit / by Darkeagle \ / http://eagle.blacksecurity.org \ / MS coders codes so secure code. Keep coding : \ / Original Advisory: http://eagle.blacksecurity.org/stuff/unl0ck/adv/55k700206.txt \ / Exploit tested in WinXP SP2 RUS. \ / includ...

[Full-disclosure] Privilege Scalation for Windows Networks using weak Service restrictions v2.0 exploit

Proof of concept of Sudhakar Govindavajhala and Andrew Appel paper http://www.cs.princeton.edu/sudhakar/papers/winval.pdf Running as an unprivileged user you can test if your services are vulnerable and can be used to install a backdoor. Both source code and binary included Microsoft advisory:...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

No description provided by source. / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 /...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

Exploit for unknown platform in category local exploits ====================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit new ====================================================================== / Microsoft HTML Help Workshop...

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow (2)

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow 2 / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web:...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)

/ Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 / include include include define BUFL...