1685 matches found
Clone the administrator account the method-vulnerability warning-the black bar safety net
Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...
using named pipes for local privilege escalation
Digital Scream August, 2003 Using named pipes for local privilege escalation For Phrack magazine 61 Operating systems created by Microsoft in recent years several years old, based on the Windows NT kernel. This decision is positive affected the security of released operating systems, relatively...
MS Windows IIS Unicode Remote Transversal Bug
No description provided by source. / iisex iis exploit - nost's idea v2 -------------------------------------- Okay.. the first piece of code was not really finished. So, i apologize to everybody.. by incubus [email protected] grtz to: Bio, nos, zoa, reg and vor... who else would stay up at nig...
MS Windows WebDav III remote root Exploit (xwdav)
No description provided by source. / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include stdio.h include errno.h include string.h include stdlib.h include fcntl.h include sys/types.h include...
CVE-2006-0765
GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...
Design/Logic Flaw
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...
Design/Logic Flaw
GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...
CVE-2006-0765
CVE-2006-0765 describes a GUI display truncation in ICQ 2003a/2003b and ICQ Lite 4.0/4.1 on Windows, where a filename that is all uppercase and of a specific length causes the malicious file extension to be truncated in the UI, allowing user-assisted remote attackers to bypass security warnings a...
CVE-2006-0766
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...
Code injection
The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when 1 it establishes an association with a station in ad hoc aka peer-to-peer mode or 2 a station in ad hoc mode establishes an association with it, which...
Mining access to VNC secure tunneling-vulnerability warning-the black bar safety net
I believe many readers like to use Telnet on the server for remote access, use the Telnet server and the client may also vary, may be Microsoft's Terminal Services or PCAnywhere, etc., I believe most of the users still prefer to VNC this free lunch. But you use VNC at the same time there is no...
Syskey Double encryption method and crack cheats-exploits warning-the black bar safety net
Many of my friends may know that in Windows 2 0 0 0 and Windows XP you can use the syskey command to the system is encrypted using Syskey Double encryption system generally speaking it should be relatively safe, however some of the so-called hack or find a hack Syskey dual encryption method, the...
Windows password weakness
Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...
winrar-3.50-eng.txt
/ local exploit for winrar include include int main int argc, char argv long sysaddr = 0x77C18044; // winxp sp0 targets... long exitaddr = 0x77C27ADC; long cmdaddr = 0x77C01335; char buf3000; char cmd3000; if argc \n\n"; exit0; memsetbuf, 0x00, 3000; memsetcmd, 0x00, 3000; memsetbuf, 0x55, 516;...
CVE-2002-1940
CVE-2002-1940 affects the LCC-Win32 3.2 compiler running on Windows 95/98/ME, where memory after the import table can leak previously used data, potentially exposing sensitive information. Root cause involves memory handling in that environment; Red Hat/Red Hat-like advisories and other sources c...
Microsoft Windows - HTA Script Execution (MS05-016)
Microsoft Windows - HTA Script Execution MS05-016 / Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You nee...
SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)
Exploit for unknown platform in category remote exploits =============================================================== SHOUTcast 1.9.4 File Request Format String Remote Exploit win =============================================================== / Object: PoC for Nullsoft SHOUTcast 1.9.4 File...
MS05-015: Vulnerability in the Hyperlink Object Library may allow code execution (888113)
The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library that can be abused to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it. C Tenable Netwo...
MS Windows Improper Token Validation Local Exploit (working)
Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...