991 matches found
Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Endpoint Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within SemSvc.exe which listens by default on TCP port 8443 https. The SemSvc...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Citrix Provisioning Services 5.6 SP1...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow
This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...
Solarwinds Storage Manager 5.1.0 SQL Injection
This module exploits a SQL injection found in Solarwinds Storage Manager login interface. It will send a malicious SQL query to create a JSP file under the web root directory, and then let it download and execute our malicious executable under the context of SYSTEM. This module requires Metasploi...
Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP...
Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP...
HP Power Manager 'formExportDataLogs' Buffer Overflow
This module exploits a buffer overflow in HP Power Manager's 'formExportDataLogs'. By creating a malformed request specifically for the fileName parameter, a stack-based buffer overflow occurs due to a long error message which contains the fileName, which may result in arbitrary remote code...
Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the vxsvc.exe process. The problem affecting the part of the serve...
TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within EnUtility.dll. A module called from CASProcessor.exe running on TCP port...
HP OmniInet.exe Opcode 20 Buffer Overflow
Exploit for windows platform in category remote exploits $Id: hpomniinet4.rb 13096 2011-07-04 22:33:47Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
HP OmniInet.exe Opcode 20 Buffer Overflow
This module exploits a vulnerability found in HP Data Protector's OmniInet process. By supplying a long string of data as the file path with opcode '20', a buffer overflow can occur when this data is being written on the stack where no proper bounds checking is done beforehand, which results...
Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within agsync.dll, which listens for SOAP and sync HTTP requests on ports 80 and 4...
McAfee Multiple Products LHA Type-2 File Handling Buffer Overflow (CVE-2005-0644)
McAfee, formally Network Associates Incorporated, produces a number of popular anti-virus products for both Enterprise and Desktop consumer use. These products are capable of detecting malicious content not only within regular files but also within compressed archives such as LHA archives. There...
Oracle Application Server 10g emagent.exe Stack Buffer Overflow
Oracle Database is an enterprise-level relational database suite. It contains many components that enable users and administrators to access it for various tasks, such as database manipulation, or administration of the numerous Oracle services. One of such management utilities in the Oracle...
Ipswitch IMail Server SMTP Service Buffer Overflow (CVE-2006-4379)
The Ipswitch IMail Server is a mail server product geared towards medium to large size organizations. It contains implementations of POP3, IMAP4, and SMTP servers. The SMTP server module is installed and started in a default installation. There exists a vulnerability in the SMTP module of the...
MailEnable IMAP Service Invalid Command Buffer Overflow (CVE-2004-2501)
MailEnable is an email server suite for the Microsoft Windows platform. The product supports various popular mail transfer protocols such as SMTP, POP3 and IMAP. The components of the MailEnable product are installed as individual services on the system, called Connectors. A stack buffer overflow...
CA Multiple Products Console Server Login Handling Buffer Overflow (CVE-2007-2522)
CA Computer Associates provides a group of products intended for enhancing the security of enterprise as well as individual clients. Main series of these products were formerly known as CA eTrust products. The following is a brief list of major products in this group: CA Anti-Virus for the...
Microsoft Windows privilege escalation
Invalid event handling allows code execution in system context...