WebKit 532.5 - Stack Exhaustion

loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...

Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability

Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability Effect : Microsoft Windows 2000/XP/2003 full patch Author:MJ0011 Published: 2010-04-22 Vulnerability Details: Win32k.sys in DispatchMessage when the last call to xxxDefWindowProc, this function in dealing wit...

Microsoft Windows XP20002003 - win32k.sys SfnINSTRING Local kernel Denial of Service

Microsoft Windows XP20002003 - win32k.sys SfnINSTRING Local kernel Denial of Service / Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability Effect : Microsoft Windows 2000/XP/2003 full patch Author:MJ0011 Published: 2010-04-22 Vulnerability Details: Win32k.sys ...

Acritum Femitter 1.03 Directory Traversal

Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version of the application available. Acritum Femitte...

MultiThreaded HTTP Server 1.1 Source Disclosure

Exploit Title: MultiThreaded HTTP Server v1.1 Source Disclosure Found By: DrIDE Date: Apr. 20, 2010 Download: http://voxel.dl.sourceforge.net/project/http/version1.1/%5BUnnamed%20release%5D/HTTPProjectfat.jar Tested on: Windows 7 - Description - MultiThreaded HTTP Server v1.1 is a Java based HTTP...

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits

Exploit for windows platform in category remote exploits ============================================================== Mongoose Web Server v2.8 Multiple Directory Traversal Exploits ============================================================== Mongoose Web Server v2.8 Multiple Directory Travers...

Multi-Threaded HTTP Server 1.1 - Directory Traversal (2)

Multi-Threaded HTTP Server 1.1 - Directory Traversal 2 Exploit Title: MultiThreaded HTTP Server v1.1 Directory Traversal Found By: DrIDE Date: Apr. 20, 2010 Download: http://voxel.dl.sourceforge.net/project/http/version1.1/%5BUnnamed%20release%5D/HTTPProjectfat.jar Tested on: Windows 7 -...

Mongoose Web Server 2.8 - Multiple Directory Traversals

Mongoose Web Server 2.8 - Multiple Directory Traversals Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server...

Mongoose 2.8 Directory Traversal

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server. This is the latest version of the application available...

Acritum Femitter 1.03 - Directory Traversal

Acritum Femitter 1.03 - Directory Traversal Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version o...

Mongoose Web Server 2.8 - Multiple Directory Traversals

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server. This is the latest version of the application available...

Microsoft Windows畸形图形文件处理本地拒绝服务漏洞（MS10-021）

BUGTRAQ ID: 39320 CVE ID: CVE-2010-0482 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证畸形图形文件的重新定位部分。攻击者可以通过运行特制应用程序来利用该漏洞，导致系统变得没有响应并自动重新启动。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-021）以及相应补丁: MS10-021：Vulnerabilities in Windo...

Windows 7/2008R2 SMB Client Trans2 Stack Overflow

import sys,SocketServer EBP = "\x42\x42\x42\x42" EIP = "\x41\x41\x41\x41" packetnego = "\x00\x00\x00\x55" "\xff\x53\x4d\x42\x72\x00\x00\x00\x00\x98\x53\xc8\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe\x00\x00\x00\x00"...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates not RTM, and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw. This...

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

This module exploits a denial of service flaw in the Microsoft Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger this bug, run this module as a service and forces a vulnerable client to access the IP of this system as an SMB server. This can be accomplished by embedding a UNC...

Microsoft Security Bulletin MS10-021 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683)

Microsoft Security Bulletin MS10-021 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 979683 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows...

CVE-2010-0481

The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Virtual...

CVE-2010-0482

The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."...

Memory corruption

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted 1 SMBv...

Code injection

The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service reboot via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."...