HP Application Recovery Manager (OmniInet.exe) Buffer Overflow

$Id: hprecoverymanageromniinet.rb 8012 2009-12-28 21:12:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

DJ Studio Pro 5.1.6.5.2 SEH Exploit

No description provided by source. !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally...

E-Smartcart SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.preproject.com ? Software: E-SMARTCART ? ? author: R3d-D3v!L ? group: 4.!.5 ? Date: 18.dec.2009 ? T!ME: 05:00 pm ? Home: WwW.xP10.ME ? ? contact:...

Easy RM to MP3 Converter 2.7.3.700 - Local Buffer Overflow

Easy RM to MP3 Converter 2.7.3.700 - Local Buffer Overflow !/usr/bin/perl Easy RM to MP3 Converter 2.7.3.700 .m3u File WinXP Sp2 Buffer Overflow Exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/EasyRMtoMP3Converter.exe Tested : Windows XP SP2 En Thanks to exploit-db Originally...

CVE-2009-3586: CoreHTTP web server off-by-one buffer overflow vulnerability

census ID: census-2009-0003 URL: http://census-labs.com/news/2009/12/02/corehttp-web-server/ CVE ID: CVE-2009-3586 Affected Products: CoreHTTP web server versions = 0.5.3.1. Class: Improper Input Validation CWE-20, Failure to Constrain Operations within the Bounds of a Memory Buffer CWE-119 Remot...

IBM Lotus Domino Web Server Accept-Language Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'IBM...

XM Easy Personal FTP Server 5.8.0 Denial Of Service

Date of Discovery: 24-Nov-2009 Credits:leinakesiatgmail.com Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server failed to handle more than 2000 files or folders in the root directory. Details: if you could log on...

Autodesk 3DS Max Application Callbacks Arbitrary Command Execution

Exploit for unknown platform in category local exploits ================================================================== Autodesk 3DS Max Application Callbacks Arbitrary Command Execution ================================================================== Title: Autodesk 3DS Max Application...

Windows 7 Remote Kernel Crash

============================================= - Release date: November 11th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium/High ============================================= I. VULNERABILITY ------------------------- Windows 7 , Server 2008R2 Remote Kernel Crash II. BACKGROUND...

2wire Router <= 5.29.52 Remote DoS

No description provided by source. """ ======================================== 2WIRE REMOTE DENIAL OF SERVICE ======================================== Device: 2wire Gateway Router/Modem Vulnerable Software: 5.29.52 Vulnerable Models: 1700HG 1701HG 1800HW 2071 2700HG 2701HG-T Release Date:...

Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed:...

Microsoft GDI+ TIFF Buffer Overflow (MS09-062; CVE-2009-2502)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The vulnerability is due to an error when GDI+ fail...

iNTERNET.cms Cross-Site Scripting vulnerability

---------------------------------------------------------------------- PT-2009-33 Positive Technologies Security Advisory iNTERNET.cms Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software iNTERNET.cms Versions prior to...

[ONSEC-09-017] Blogolet PHP including

ONSEC-09-017 Blogolet PHP including Цель: Blogolet CMS Тип: PHP инъекция Угроза: Высокая Дата обнаружения: 21.09.2009 Дата оповещения разработчика: 21.09.2009 Дата выхода исправления: 21.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Уязвимость существует...

nullam blog 0.1.2 - Local File Inclusion / File Disclosure / SQL Injection / Cross-Site Scripting

-- Salvatore Fresta aka drosophila CWNP444351 Salvatore "drosophila" Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS + Exploitation: Remote + Date: 10 S...

[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability

---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow (PoC)

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow PoC / Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchU...

Audio Editor Pro 2.91 - Remote Memory Corruption (PoC)

Audio Editor Pro 2.91 - Remote Memory Corruption PoC Title: Audio Editor Pro 2.91 Remote Memory Corruption PoC Product web page: http://www.mightsoft.com/ Summary: Audio Editor Pro is a visual multifunctional audio files editor for Microsoft Windows Tested on: MS Windows XP Pro SP3 EN...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

Carom3D 5.06 Unicode Buffer Overrun/DoS Vulnerability

Summary Carom 3D is an online multi-user billiard game created with special 3D graphic effects bringing every aspect such as 6 ball, 9 ball, 8 ball and other Billiard games to life. Description The world famous korean game Carom3D suffers from a buffer overflow and a denial of service...