1086 matches found
CVE-2014-3697
Absolute path traversal vulnerability in the untarblock function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme...
Windows latest 2 0 1 4 providing the right tools MS14-0 5 8 EXP-vulnerability warning-the black bar safety net
By CrowStrike found that the use of more than six months of Windows local to mention the right vulnerability MS14-0 5 8CVE-2 0 1 4-4 1 1 3tool have been disclosed. Lift it right the success rate reaches 1 0 0%: The following figure shows that the current user has insufficient permissions cannot a...
CVE-2 0 1 4-4 1 1 3 exploit Process Analysis-vulnerability warning-the black bar safety net
0x00 description By VMware and Windbg build the 3 2-bit kernel debugging environment, the system is xp sp2, 执行漏洞利用程序win32.exe calc.exe, pop-up a SYSTEM of permissions calc. ! enter image description here Through the IDA analysis win32.exe can be seen signed int cdecl sub4010F2 function by calling...
Croogo 2.0.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities
------------------------ XSS 1 -------- POST parameters: - dataContacttitle ------------------------ input type="hidden"...
Croogo 2.0.0 - Arbitrary PHP Code Execution
Croogo 2.0.0 - Arbitrary PHP Code Execution !/usr/bin/env python Croogo 2.0.0 Arbitrary PHP Code Execution Exploit Vendor: Fahad Ibnay Heylaal Product web page: http://www.croogo.org Affected version: 2.0.0 Summary: Croogo is a free, open source, content management system for PHP, released under...
AContent 1.3 - Local File Inclusion
No description provided by source. Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on:...
HP Data Protector Media Operations 6.11 Multiple Modules NULL Pointer Dereference DoS
No description provided by source. Exploit Title: HP Data Protector Media Operations 6.11 Multiple NULL Pointer Dereference Local DoS 0day Date: 11/09/2010 Author: d0lc3 d0lc3xatgmaildomcom Author Link: http://elotrolad0.blogspot.com/ Software Link: trial...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
FileCOPA FTP Server <= 1.01 (LIST) Remote BoF Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Slash CMS - Multiple Vulnerabilities
No description provided by source. Exploit Title: Slash CMS Multiple Vulnerabilities Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.slash-cms.com/ Software Link: http://sourceforge.net/projects/slashcms/ Category: webapps/php Google Dork: N/A Tested on:...
MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit
No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target...
MailEnable Pro/Ent <= 2.37 (APPEND) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.35 win32...
VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow
No description provided by source. $Id: vlcsmburi.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Zen Cart 1.3.9f (typefilter) - Local File Inclusion Vulnerability
No description provided by source. Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML...
Win32 Shellcode (cmd.exe) for XP SP2 Turkish 26 Bytes
No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP2 Turkish Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...
Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit
No description provided by source. ?!/usr/bin/env python Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit Vendor: Lunar CMS Product web page: http://www.lunarcms.com Affected version: 3.3 Summary: Lunar CMS is a freely distributable open source content management system written for...
Apache Win32 1.3.x/2.0.x Batch File Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host runnin...
Snort <= 2.4.2 BackOrifice Remote Buffer Overflow Exploit (meta)
No description provided by source. for educational purpose only by Kira trir00t at gmail.com package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version' =...
AASync 2.2.1.0 - (Win32) Stack Buffer Overflow (LIST)
No description provided by source. $Id: aasynclistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Microsoft Windows NT 4/2000 NetBIOS Name Conflict Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1514/info An attacker can send the NetBIOS name service a NetBIOS Name Conflict message even when the receiving machine is not in the process of registering its NetBIOS name. The target will then not attempt to use that...