Microsoft Windows Explorer 6.0.2900.5512 - 'Shmedia.dll 6.0.2900.5512' AVI Preview Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url: http://www.micro$oft.com Shmedia.dll 6.0.2900.5512 MD5:...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

IrfanView 4.28 Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll iview32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 JPEG2000.dll...

IrfanView 4.28 Multiple Denial of Service Vulnerabilities

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll iview32.exe...

Unfixed XSS vulnerability at www.ecoletheologique-stcyprien.org

Security researcher Xylitol, has submitted on 30/05/2010 a cross-site-scripting XSS vulnerability affecting www.ecoletheologique-stcyprien.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010...

WFTPD REST命令远程拒绝服务漏洞

BUGTRAQ ID: 38762 WFTPD是一款Windows平台下的FTP服务软件。 WFTPD服务器在处理REST命令时存在拒绝服务漏洞，远程攻击者可以通过REST命令在指定了无效的起始位置后请求文件导致FTP服务终止。 Texas Imperial Software WFTPD 3.3 厂商补丁： Texas Imperial Software ----------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpd.com/default.html WFTPD 3.3...

WFTPD 3.3 - Remote REST Denial of Service

WFTPD 3.3 - Remote REST Denial of Service WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try:...

WFTPD 3.3 Remote Denial Of Service

WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try: sock.connecthostname, 21 except: print "- Connection...

WFTPD 3.3 Remote REST DoS Exploit

Exploit for linux platform in category dos / poc ================================= WFTPD 3.3 Remote REST DoS Exploit ================================= WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print "Usage: wftpdkill \n" def...

Golabi CMS Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================== Golabi CMS Remote File Inclusion Vulnerability ============================================== -------------------------------------------------------------------------------- Golabi CMS Remote...

Golabi CMS Remote File Inclusion Vulnerability

-------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR -------------------------------------------------------------------------------- Golabi CMS Remote File Inclusion Vulnerability + Application Info: Name: Golabi CMS Author:...

Exodus v0.10 uri handler arbitrary parameter injection

-------------------------------------------------------------------------------- Exodus v0.10 uri handler arbitrary parameter injection by Nine:Situations:Group::strawdog tested against IE8b/xpsp3 may not work against non-English systems because of an installation bug...

Double free

Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled...

Design/Logic Flaw

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service hang or crash via a malformed archive that triggers an...

CVE-2008-1412: Improper Input Validation

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service hang or crash via a malformed archive that triggers an...

CVE-2007-3893: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error...

Buffer overflow

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4463: Undefined Security Weakness

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...