MS12-013: Vulnerability in C Run-Time Library Could Allow Remote Code Execution (2654428)

The remote host contains a version of Microsoft's C run-time library that is affected by a buffer overflow vulnerability. An attacker who tricked a user on the affected host into opening a specially crafted media file could leverage this issue to execute arbitrary code in the context of the curre...

Microsoft Windows Ancillary Function Driver CVE-2012-0148 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

Microsoft Plans Nine Bulletins, Four Critical for February Patch Tuesday

Microsoft will issue nine security updates, four critical, for Patch Tuesday next week, fixing 21 different vulnerabilities in Windows, Internet Explorer, .NET, Silverlight and Office. Seven of the nine may lead to remote code execution, while the other two may lead to elevation of privilege,...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow

Exploit for windows platform in category remote exploits $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

KedaiScript Shell Upload

Exploit Title: KedaiScript Remote Upload Shell Vulnerability DDate: 10-02-2012 Author: Netrondoank Software Link: www.kedaiscript.com Version: mlm10v21,mmgbinary,portal Tested on: windows 7 Contact: [email protected] E X P L O I T 1. Login As Demo...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Citrix...

Citrix Provisioning Services 5.6 SP1 - Streamprocess Opcode 0x40020000 Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Citrix...

Adobe Flash Player MP4 Sequence Parameter Set Processing

Added: 02/09/2012 CVE: CVE-2011-2140 BID: 49083 OSVDB: 74439 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player Sub1005B396 function allows command execution when a user opens a specially crafted .swf file...

Quartzo InterApp Control 3.22 Authentication Bypass

Exploit for windows platform in category local exploits / Title: Quartzo InterApp Control 3.22 Authentication Bypass Date: 02-07-12 Category: Local Vendor website: http://www.quartzo.com.br/ Author: Rodrigo Santos Contact: email protected Tested on: Quartzo InterApp Control free version 3.22 on...

Typsoft FTP Server 1.10 Denial Of Service

Exploit 1: !/usr/bin/perl Exploit Title: Typsoft FTP Server DoS CWD command Date: 02/06/2012 Author: Balazs Makany Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows 7 does not work on Windows XP Please note, that you need to have a valid username/password to...

TYPSoft FTP Server 1.10 - Multiple Denial of Service Vulnerabilities

!/usr/bin/perl Exploit Title: Typsoft FTP Server DoS CWD command Date: 02/06/2012 Author: Balazs Makany Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows 7 does not work on Windows XP Please note, that you need to have a valid username/password to execute th...

Microsoft Windows Media Player ‘winmm.dll’ MIDI文件解析远程代码执行漏洞(CVE-2012-0003)

CVE-2012-0003 Microsoft Windows是微软发布的非常流行的操作系统。Windows Media Player是系统的多媒体播放组件。 WMP在处理畸形结构的MIDI数据时存在内存破坏漏洞。远程攻击者可利用该漏洞通过诱使用户访问恶意网页控制用户系统。 0 Microsoft Windows XP Professional Microsoft Windows XP Home Edition Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 20...

TND Media CMS SQL Injection

Exploit Title: TND media Cms Sql Injection Google Dork: "TND media webdesign" Discovered By: M4sT3r4N0nY Software Link: http://www.tndmedia.nl/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit: http://target/releases.php?id=S...

Joomla Component com_sadnews LFI Vulnerability

No description provided by source. Joomla Component comsadnews LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comsadnews" x Vuln Exploit...

Joomla Component com_rule LFI Vulnerability

No description provided by source. Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

DirectAdmin ADD Sub Domain CSRF Exploit

Exploit for php platform in category web applications !/usr/bin/perl Title : DirectAdmin Web Control Panel � 2005 JBMC Software Author : OnurTURKESHAN Homepage : http://www.directadmin.com/ tested on : Windows 7 Seni Unutmayacagiz MIRIM- system"cls"; print "...

Ultimate Locator SQL Injection

Exploit Title: Ultimate Locator SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://www.ultimatelocator.com/ Dork: "Powered by Ultimate Locator" Tested on: Linux/Windows 7 Vulnerable File: resultslist.php Vulnerable parameter: radius= PoC:...

Joomla Rule Local File Inclusion

Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

DirectAdmin Cross Site Request Forgery

!/usr/bin/perl Title : DirectAdmin Web Control Panel � 2005 JBMC Software Author : Onur T�RKE�HAN Homepage : http://www.directadmin.com/ tested on : Windows 7 Seni Unutmayacagiz MIRIM- system"cls"; print " +----------------------------------------+\n | directadmin csrf vuln creator by turkeshan |...

Free WMA MP3 Converter v1.5 (.wav) Local Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Free WMA MP3 Converter v1.5 .wav Local Buffer Overflow Vulnerability Version: 1.5 Date: 2012-01-21 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://www.eusing.com Tested on: Windows XP SP3...