Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020004 GetBootRecordRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020002 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020002 GetFooterRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url: http://www.oracle.com/technetwork/middleware/epm/downloads/index.html files tested: SystemInstaller-11121-win32.zi...

Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution

Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url:...

Oracle Hyperion Financial Management TList6 ActiveX Control Code Exec

Exploit for windows platform in category remote exploits Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url:...

Oracle Hyperion Financial Management Code Execution

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url: http://www.oracle.com/technetwork/middleware/epm/downloads/index.html files tested: SystemInstaller-11121-win32.zi...

NJStar Communicator 3.00 - MiniSMTP Server Remote (Metasploit)

Exploit Title: NJStar Communicator 3.00 MiniSMTP Server Remote Exploit Date: 10/31/2011 Author: Dillon Beresford Twitter: https://twitter.com/!/D1N Software Link: http://www.njstar.com/download/njcom.exe Version: 3.00 and prior Build: 11818 and prior Tested on: Windows XP SP3/SP2/SP1 and Windows...

NJStar Communicator 3.00 - MiniSMTP Server Remote (Metasploit)

NJStar Communicator 3.00 - MiniSMTP Server Remote Metasploit Exploit Title: NJStar Communicator 3.00 MiniSMTP Server Remote Exploit Date: 10/31/2011 Author: Dillon Beresford Twitter: https://twitter.com/!/D1N Software Link: http://www.njstar.com/download/njcom.exe Version: 3.00 and prior Build:...

HighCMS Overflow

---------------------------------------------------------------- HighCMS True Demos: http://www.mayadin.biz/index.aspx?siteid=1&pageid=4141414141 http://ielts-house.com/index.aspx?siteid=1&pageid=4141414141 http://www.persiangoldfish.com/index.aspx?siteid=1&pageid=414141414141...

NJStar Communicator 3.00 MiniSMTP Server Remote Exploit

Exploit for windows platform in category remote exploits Exploit Title: NJStar Communicator 3.00 MiniSMTP Server Remote Exploit Date: 10/31/2011 Author: Dillon Beresford Twitter: https://twitter.com/!/D1N Software Link: http://www.njstar.com/download/njcom.exe Version: 3.00 and prior Build: 11818...

Market Town CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Name: Market Town CMS SQL Injection Vulnerability Google Dork: inurl:infopage.asp?infoid= Web Site: http://www.market-town.com/ Data: 30-Nov-2011 Author: Mr.XHat Discovered By: Mr.XHat Tested on: Windows Server 2003 Exploit:...

Four Corner CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Name: Four Corner CMS SQL Injection Vulnerability Google Dork: inurl:Default.asp?SectionID= Type: ASP Web Site: http://www.4corner.af/ Data: 2011/08/07 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 Exploit:...

Google Chrome - Denial of Service

Google Chrome - Denial of Service / GGGGGG\ GG GG\ GG / | aaaaaa\ rrrrrr\ aaaaaa\ gggggg\ eeeeee\ GG |GGGG\ \aa\ rr rr\ \aa\ gg gg\ ee ee\ GG |\GG | aaaaaaa |rr | |aaaaaaa |gg / gg |eeeeeeee | GG | GG |aa aa |rr | aa aa |gg | gg |ee | \GGGGGG |\aaaaaaa |rr | \aaaaaaa |\ggggggg |\eeeeeee\ / ||...

Oracle AutoVue 20.0.1 AutoVueX - ActiveX Control SaveViewStateToFile

Oracle AutoVue 20.0.1 AutoVueX - ActiveX Control SaveViewStateToFile Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote File Creation / Overwrite Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url of a test version:...

Oracle AutoVue 20.0.1 AutoVueX - ActiveX Control SaveViewStateToFile

Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote File Creation / Overwrite Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url of a test version: http://www.oracle.com/technetwork/apps-tech/autovue/index.html file:...

HP Power Manager 'formExportDataLogs' Buffer Overflow

Exploit for cgi platform in category remote exploits $Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages...

Design/Logic Flaw

Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in...

CVE-2011-2011

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages...