959 matches found
CA CAM log_security() Stack Buffer Overflow (Win32)
No description provided by source. $Id: camlogsecurity.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
HP Data Protector Client EXEC_CMD Remote Code Execution PoC (ZDI-11-055)
No description provided by source. Exploit Title: HP Data Protector Client EXECCMD Remote Code Execution Vulnerability PoC ZDI-11-055 Date: 2011-05-28 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0923 Notes: ZDI-11-055...
CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow
No description provided by source. $Id: tapeengine8A.rb 10551 2010-10-05 12:38:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Oracle Database Client System Analyzer Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow
No description provided by source. Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite...
Safenet IPSecDrv.sys <= 10.4.0.12 Local kernel ring0 SYSTEM Exploit
No description provided by source. / safenet-ipsec-call.c Copyright c 2008 by [email protected] Safenet IPSecDrv.sys = 10.4.0.12 local kernel ring0 indirect call SYSTEM exploit by mu-b - Thu 03 Jan 2008 - Tested on: IPSecDrv.sys 10.4.0.12 bundle with: SafeNET HighAssurance Remote, SoftRemote -...
Microsoft Windows ndproxy.sys - Local Privilege Escalation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Local Rank = AverageRanking include Msf::Post::File include...
CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities PoC
No description provided by source. Exploit Title: Computer Associates Advantage Ingres 2.6 Multiple Buffer Overflow Vulnerabilities PoC Date: 2010-08-14 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org Version: 2.6 Tested on: Windows 2003 Server SP1 en CVE: CVE-2007-3336 - CVE-2007-3338...
HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution
No description provided by source. Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1553 Code : !/usr/bin/python import struct import socket...
Aladdin Knowledge Systems Ltd. PrivAgent ActiveX Control Overflow
No description provided by source. html titleAladdin Knowledge Systems Ltd. PrivAgent ActiveX Control Overflow/title !-- Aladdin Knowledge Systems Lt.d PrivAgent ActiveX Control Overflow Vendor: Aladdin Knowledge Systems Version: activex2002 Tested on: Windows 2003 SP2 / IE 7 Download:...
Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)
No description provided by source. $Id: ms07029msdnszonename.rb 10503 2010-09-28 15:23:14Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Computer Associates Alert Notification Buffer Overflow
No description provided by source. $Id: etrustitmalert.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
SlimFTPd <= 3.16 Remote Buffer Overflow Exploit
No description provided by source. / Written by redsand [email protected] Jul 22, 2005 Vulnerable: SlimFtpd v3.15 and v3.16 origional vuln found by: Usage: ./redslim 127.0.0.1 OS RET / include stdio.h include stdlib.h include string.h ifdef WIN include winsock2.h include windows.h // pragma lib...
Windows NDPROXY - 本地权限提升漏洞(MS14-002)
漏洞成因 这是一个windows内核漏洞，漏洞的触发需要开启Routing and Remote Access服务，影响 windowsxp，windows2003. 先上 poc c include include int main HANDLE hDev = CreateFile"\\.\NDProxy", GENERICREAD | GENERICWRITE, FILESHAREREAD | FILESHAREWRITE, NULL, OPENEXISTING , 0, NULL; ifhDev==INVALIDHANDLEVALUE printf"CreateFile...
Ericom AccessNow Server Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpClient def initializein...
OemPro 3.6.4 - Multiple Vulnerabilities
No description provided by source. Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
PeerCast <= 0.1216 URL Handling Buffer Overflow (win32)
No description provided by source. $Id: peercasturl.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
freeFTPd 1.0 Username Overflow
No description provided by source. $Id: freeftpduser.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
PHP Fixes OpenSSL Flaws in New Releases
The PHP Group has released new versions of the popular scripting language that fix a number of bugs, including two in OpenSSL. The flaws fixed in OpenSSL don’t rise to the level of the major bugs such as Heartbleed that have popped up in the last few months. But PHP 5.5.14 and 5.4.30 both contain...
Ericom AccessNow Server Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Ericom AccessNow Server Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow in Ericom AccessNow...