200 matches found
Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit
No description provided by source. usage: vbexploit.py FileName.vbp import sys print "--------------------------------------------------------------------------" print " PoC2 Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution " print " author: shinnai"...
IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit
Exploit for aix platform in category local exploits =============================================================== IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char...
Command injection
pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R ParseRoutine command line argument...
CVE-2007-4003
The CVE-2007-4003 issue affects IBM AIX 5.3 SP6 where the setuid root program pioout loads an attacker-supplied shared library when given -R (ParseRoutine). Local users can trigger arbitrary code execution by pointing to a malicious library, potentially gaining root privileges. Several connected ...
CVE-2007-3207: Undefined Security Weakness
Buffer overflow in the NFS mount daemon XNFS.NLM in Novell NetWare 6.5 SP6, and probably earlier, allows remote attackers to cause a denial of service abend via a long path in a mount request...
CVE-2002-2224: Undefined Security Weakness
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of...
Design/Logic Flaw
SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...
CVE-2006-1167: Undefined Security Weakness
SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...
CVE-2007-0468
CVE-2007-0468 describes a stack-based buffer overflow in rcdll.dll inside msdev.exe (Visual C++ MSVC) of Microsoft Visual Studio 6.0 SP6. The vulnerability is triggered by a long file path in the RC file’s 1 TYPELIB MOVEABLE PURE option, allowing a user-assisted attacker to execute arbitrary code...
CVE-2007-0468: Undefined Security Weakness
Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...
Microsoft Visual C++ (.RC Resource Files) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================================= Microsoft Visual C++ .RC Resource Files Local Buffer Overflow Exploit ======================================================================= // // // Microsoft Visual C...
Novell NetWare 6.5 SP2-SP7 LSASS CIFS.NLM Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow
This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. Module Options msf use exploit/netware/smb/lsass/cifs msf undefinedcifs show actions ...actions... msf undefinedcifs set...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...
Vulnerability warning it is very dangerous to the IDA overflow vulnerability-vulnerability warning-the black bar safety net
The program: idahack it. Enter MS-DOS mode, it is assumed that idq. exe located in c:, | c:\idahack.exe Run parameters: c:\idahack chinese win2k : 1 chinese win2ksp1: 2 chinese win2ksp2: 3 english win2k : 4 english win2ksp1: 5 english win2ksp2: 6 japanese win2k : 7 japanese win2ksp1: 8 japanese...
CVE-2006-2466
BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
CVE-2006-0430
Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service server slowdown...