lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)

Title: Mozilla Firefox Array.reduceRight Integer Overflow Exploit Date: 12 Oct 2011 Author: Matteo Memelli ryujin -AT- offensive-security.com CVE-2011-2371 Full exploit package: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17974.zip ff-i- Title: Mozilla Firefox...

RealNetworks, Inc. Releases Security Updates for RealPlayer

RealNetworks, Inc. has released security updates to address a vulnerability affecting Windows RealPlayer 14.0.1 and earlier versions and RealPlayer Enterprise 2.1.4 and earlier versions. Exploitation of this vulnerability may allow an attacker to execute arbitrary code in the context of the...

AIOCP 1.4.001 - Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt img...

Adobe Products Content Code Execution Vulnerability (Windows)

This host has Adobe Acrobat or Adobe Reader or Adobe flash Player installed, and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeprdtsarbitrarycodeexecvulnnov10win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Products Arbitrary Code Execution...

TeamViewer 5.0.8703 - dwmapi.dll DLL Hijacking

TeamViewer 5.0.8703 - dwmapi.dll DLL Hijacking / Exploit Title: TeamViewer define DllExport declspec dllexport BOOL WINAPI DllMain HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved dllhijack; return 0; int dllhijack MessageBox0, "TeamViewer DLL Hijacking!", "DLL Message", MBOK; return 0;...

ZipExplorer 7.0 - .zar Denial of Service

ZipExplorer 7.0 - .zar Denial of Service !/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download:...

Easy Address book Webserver 1.2 CSRF

Exploit for php platform in category web applications ==================================== Easy Address book Webserver 1.2 CSRF ==================================== Software : Easy Address Book WebServer 1.2 Author : Markot Date : May 25, 2010 OS : Windows Tested on : XP SP3 En Virtual box Type o...

Xi Software Net Transport eDonkey Protocol Buffer Overflow

Xi Software Net Transport is a shareware download manager and stream ripper for Windows. A buffer overflow vulnerability has been reported in Xi Software Net Transport. The vulnerability is a result of an unproperly boundary checking while processing the user-supplied data. An attack targeting th...

DESlock+ 4.0.2 - dlpcrypt.sys Local Kernel Ring0 Code Execution

DESlock+ 4.0.2 - dlpcrypt.sys Local Kernel Ring0 Code Execution / deslock-dlpcrypt.c Copyright c 2009 by DESlock+ 4.0.2 local kernel SYSTEM exploit by mu-b - Thu 18 Jun 2009 - Tested on: dlpcrypt.sys 0.1.1.27 .text:0001BB2E: 'what do ya want for nothing?' - hmmm, something that doesn't pass kerne...

Sun xVM VirtualBox 1.6.4 - Privilege Escalation (PoC)

Sun xVM VirtualBox 1.6.4 - Privilege Escalation PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory Information Title: Sun xVM VirtualBox Privilege...

XChat 2.6.7 (Windows) - Remote Denial of Service

/str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by ratboy // Tested on Windows SP1/SP2 // The following bug was tested on the XChat = 2.6.7 ...

Skulltag 0.96f - Version String Remote Format String (PoC)

Skulltag 0.96f - Version String Remote Format String PoC Luigi Auriemma Application: Skulltag http://www.skulltag.com Versions: = 0.96f Platforms: Windows Bug: format string Exploitation: remote, versus server Date: 23 Apr 2006 Author: Luigi Auriemma e-mail: [email protected] web:...

CVE-2005-4210

Opera before 8.51, when running on Windows with Input Method Editor IME installed, allows remote attackers to cause a denial of service persistent application crash by bookmarking a site with a long title...

indows Plug and Play Remote Compromise

nternet Security Systems Protection Advisory August 9, 2005 Windows Plug and Play Remote Compromise Summary: X-force has discovered a vulnerability in the Windows Plug and Play service. This vulnerability is remotely exploitable in the default configuration of Windows 2000, and is present in all...

netmailsharpro.txt

Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...

Ethereal 0.10.9 (Windows) - '3G-A11' Remote Buffer Overflow

/ Ethereal IAPP remote buffer overflow 2 PoC exploit --------------------------------------------------- To test this vulnerability on windows, try to send 3-10 packets that will trigger the crash, and scroll between captured packets in Ethereal. Coded by Leon Juranic LSS Security / include inclu...

CVE-2004-0090

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors...

CVE-2004-0211

The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service system crash via a malicious program...

CVE-2003-0017

Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as "", which causes a different filename to be processed and served...