Tiny Server 1.1.9 Denial Of Service

!/usr/bin/python Overflow exploiting a vulnerability in Tiny Server ' sys.exit host = sys.argv1 port = sys.argv2 buffer = 'A' 100 + 'HTTP/1.0\r\n' print '\n' print ' Tiny Server = 1.1.0HTTP HEAD request overflow' print ' Written by Brock Haun' print ' [email protected]' print '\n' try:...

Typesoft FTP Server 1.1 Denial Of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

TypesoftFTP Server 1.1 Remote DoS (APPE)

Exploit for windows platform in category dos / poc !/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS:...

Pakyu Cenloder Microsoft Remote Desktop Denial Of Service

Exploit Title: Pakyu Cenloder Date: March 16 2012 Author: BMario Application Link: Microsoft Terminal Services / Remote Desktop Services http://msdn.microsoft.com/en-us/library/aa383015v=vs.85.aspx Version: any Windows version before 13 Mar 2012 Platforms: Windows Bug: use after free Exploitation...

TYPSoft FTP Server 1.1 - APPE Remote Denial of Service

TYPSoft FTP Server 1.1 - APPE Remote Denial of Service !/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target O...

TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

Microsoft Remote Desktop Protocol RCE Vulnerabilities (2671387) - Active Check

This host is missing a critical security update according to Microsoft Bulletin MS12-020. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(MS12-018)

BUGTRAQ ID: 52317 CVE ID: CVE-2012-0157 Microsoft Windows是流行的计算机操作系统。 Windows Kernel Win32k.sys在处理"PostMessage"函数时存在本地权限提升漏洞，本地攻击者可利用此漏洞通过传递特定输入到某些参数，以提升的权限执行任意代码，造成完全控制受影响计算机。 0 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Serv...

Microsoft Windows远程桌面协议RDP拒绝访问漏洞(MS12-020)

BUGTRAQ ID: 52354 CVE ID: CVE-2012-0152 远程桌面协议（RDP, Remote Desktop Protocol）是一个多通道（multi-channel）的协议，让用户（客户端或称“本地电脑”）连上提供微软终端机服务的电脑（服务器端或称“远程电脑”）。 Windows在处理某些RDP报文时Terminal Server 存在错误，可被利用造成服务停止响应。 0 Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows Server 2003...

CVE-2012-0454

Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...

Design/Logic Flaw

Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...

CVE-2012-0454

Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...

CVE-2012-0454

Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...

CVE-2012-0454

CVE-2012-0454 describes a use-after-free in Mozilla Firefox (including Firefox 4.x–10.0 and ESR 10.x before 10.0.3), Thunderbird 5.0–10.0, and SeaMonkey before 2.8 on 32-bit Windows 7. The issue arises when using the file-open dialog in a child window, related to IUnknown_QueryService in shlwapi....

Microsoft adds Enhanced Memory Protections in IE10

Microsoft adds Enhanced Memory Protections in IE10 Internet Explorer 10, the next version of the popular browser from Microsoft will incorporate new protections in terms of memory management. French security firm VUPEN has managed to hack Microsoft's Internet Explorer 9 on a fully patched Windows...

ModX 2.2.0 - Multiple Vulnerabilities

Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure Google Dork: if relevant we will automatically add these to the GHDB Date: 13/03/2012 Author: n0tch aka andmuchmore Software Link: http://modx.com/download/ Version: 2.2.0 Tested on: Windows XP/ Windows 7 / Ubuntu +-- LFI --+...

Max Guestbook 1.0 - Multiple Vulnerabilities

Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Simple Posting System - Multiple Vulnerabilities

Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387) - Local Version Check

This host is missing a critical security update according to Microsoft Bulletin MS12-020. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...