MS Internet Explorer (IFRAME Tag) Buffer Overflow Exploit

No description provided by source. HTML!-- ,sSSSs, Ss, Internet Exploiter v0.1 SS" YS' 'Ss. MSIE IFRAME src=... name="..." BoF PoC exploit iS' ,SS" Copyright C 2003, 2004 by Berend-Jan Wever. YS, .ss ,sY" http://www.edup.tudelft.nl/bjwever "YSSP" sSS [email protected] This program is free...

Icecast <= 2.0.1 Win32 Remote Code Execution Exploit (modded)

Exploit for unknown platform in category remote exploits ============================================================= Icecast include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1" define PORT 80...

Icecast 2.0.1 (Win32) - Remote Code Execution (2)

/ ICECAST 2.0.1 WiN32 REMOTE EXPLOiT by Luigi Auriemma Modded by: LORDKAOZ OF IMPERATORI TEAM Greetz to marc0z, m3nTe, DarKBad, OuT, FaX Anche se non se lo merita, MeSSiA e eXpLoIt! This exploit will add an Administrator account with USER: X AND PASSWORD: X / include include include ifdef WIN32...

Icecast &lt;= 2.0.1 Win32 Remote Code Execution Exploit

No description provided by source. / by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder...

Code execution in Icecast 2.0.1

Luigi Auriemma Application: Icecast http://www.icecast.org Versions: = 2.0.1 Platforms: only Win32 seems vulnerable but other platforms could be affected in some conditions Bug: array overflow Risk: critical Exploitation: remote Date: 28 September 2004 Author: Luigi Auriemma e-mail:...

CVE-2002-0969

CVE-2002-0969 : A buffer overflow in the MySQL daemon (mysqld) on Win32 allows local code execution via a long datadir parameter in my.ini, when ACLs grant Full Control to Everyone. Affected: MySQL 3.23.x before 3.23.50 and 4.0 beta before 4.0.2. Root cause: overflow in handling the datadir value...

Apache < 2.0.44 File Access on Win32

Binary data 1499.prm...

Apache < 2.0.40 Win32 Directory Traversal File Access

Binary data 1498.prm...

CVE-2004-0542

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

[Full-Disclosure] iDEFENSE Security Advisory 08.03.04b: NGSEC StackDefender 2.0 Invalid Pointer Dereference Vulnerability

NGSEC StackDefender 2.0 Invalid Pointer Dereference Vulnerability iDEFENSE Security Advisory 08.03.04b www.idefense.com/application/poi/display?id=119&type=vulnerabilities August 3, 2004 I. BACKGROUND StackDefender is an IPS Intrusion Prevention System, for Win32 platforms, that will deny shellco...

EUVD-2004-0541

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

CVE-2004-0542

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

CVE-2004-0542

CVE-2004-0542 affects PHP on Win32: PHP versions before 4.3.7 fail to filter all shell metacharacters in escapeshellcmd/escapeshellarg, enabling local or remote attackers to execute arbitrary code, overwrite files, or access internal environment variables by using characters such as “%”, “|”, or ...

CVE-2004-1077

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...

CVE-2004-1078

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element...

[Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability

Perl win32stat Function Buffer Overflow Vulnerability iDEFENSE Security Advisory 04.05.04 www.idefense.com/application/poi/display?id=93&type=vulnerabilities April 5, 2004 I. BACKGROUND Perl is a popular programming language due to its text manipulation capabilities and rapid development cycle. I...

[Full-Disclosure] GateKeeper Pro 4.7 buffer overflow

/==============================CRPT - French Team============================= Coromputer Security Advisory - CRPTSA-01 ================================== Summary ================================== Software : GateKeeper Pro 4.7 Platforms : win32 Risk : High Impact : Buffer overflow Release Date :...

Happy belated Personal Firewall day - SRT2004-01-17-0628 - Agnitum Optpost firewall allows Local SYSTEM access

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

[Full-Disclosure] SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access.

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...