CVE-2008-4038

Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block SMB request that contains a filename with a crafted length, aka "SMB Buffer Underflow...

IBM DB2 9.5 < Fix Pack 2 Multiple Vulnerabilities

The installation of IBM DB2 9.5 running on the remote host does not have Fix Pack 2 applied. It is, therefore, affected by the following issues : - DB2 does not mark inoperative or drop views and triggers if the definer cannot maintain the objects IZ22307. - Password-related connection string...

Ipswitch WS_FTP HomeProfessional 8.0 - WS_FTP Client Format String

Ipswitch WSFTP HomeProfessional 8.0 - WSFTP Client Format String source: https://www.securityfocus.com/bid/30720/info Ipswitch WSFTP client is prone to a format-string vulnerability it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing...

asus-overflow.txt

/ Dreatica-FXP crew ---------------------------------------- Target : ASUS DPC Proxy 2.0.0.16/2.0.0.24 ---------------------------------------- Exploit : ASUS DPC Proxy 2.0.0.16/2.0.0.19 Remote Buffer Overflow Exploit Exploit date : 02.04.2008 Exploit writer : Heretic2 [email protected] OS :...

A further MS08-0 2 5 exploit procedure decrypt-vulnerability warning-the black bar safety net

Real available MS08025 it. In order to run multiple times, the server blue-screen, please direct use of a run all the commands For example: MS08025 "cmd.exe /c net user hacker hacker /add & net localgroup administrators hacker /add" Local Privilege Escalation Vulnerability ExploitMS08025 Modify b...

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMT...

pandaav-local.txt

/ Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda Antivirus 2008 Not Affected Products: - Panda...

CVE-2007-0945

Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption, aka "Property Memory Corruption...

CVE-2007-1215

Buffer overflow in the Graphics Device Interface GDI in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images...

CVE-2007-1215

Buffer overflow in the Graphics Device Interface GDI in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images...

CVE-2007-0038

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

Oracle 10g (PROCESS_DUP_HANDLE) Local Privilege Elevation (win32)

No description provided by source. // Argeniss - Information Security // // Oracle Database local elevation of privileges PoC exploit // // Author: Cesar Cerrudo include windows.h include stdio.h BOOL InjectShellcodeDWORD oldEIP,CHAR oSID HMODULE hKernel; FARPROC pCreateProc; LPSTR...

Windows OS Not Activated (WMI)

Binary data wmiwindowsnotactivated.nbin...

Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit-vulnerability warning-the black bar safety net

// kav 6.0 0day local priv escalation exploit // by m4d // http://unl0ck.net include windows. h include stdlib. h include stdio. h // r0-shellcode creates C:\Hello.txt with "Hello from ring-0! :" unsigned char Shellcode4 0 5 = 0x55, 0x8B, 0xEC, 0x83, 0xC4, 0xBC, 0x60, 0x83, 0x4D, 0xE8, 0xFF, 0x0F...

3comtftp.txt

Doesn't look like SEH is being overwritten so I'm having trouble getting this to work with DEP-enabled XPSP2 and 2K3. Tested on XPSP2 and Win2K. Includes offsets for NT, 2K and XP call esi. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= require 'msf/core' module Msf class...

NaviCOPA Web Server 2.01 - 'GET' Remote Buffer Overflow

/ naviexp.c NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\naviexp 192.168.0.1 0 NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 + Sending buffer: OK Check your shell on 192.168.0.1:4444 Pres...

Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...

Hummingbird Connectivity 10 SP5 LPD Buffer Overflow

This module exploits a stack buffer overflow in Hummingbird Connectivity 10 LPD Daemon. This module has only been tested against Hummingbird Exceed v10 with SP5. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Mercur Mailserver 5.0 SP3 (IMAP) Remote Buffer Overflow Exploit (2)

No description provided by source. !/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security http://www.securityfocus.com/bid/17138 acaro at jervus.it use...

Windows Task Scheduler buffer overflow

Added: 09/05/2006 CVE: CVE-2004-0212 BID: 10708 OSVDB: 7798 Background The Windows Task Scheduler is used to schedule commands to run at specified times. Problem A buffer overflow vulnerability in the Task Scheduler could allow command execution when a specially crafted .job file is processed...