VulnCheck KEV: CVE-2011-0096

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote...

Winamp 5.6.1 .m3u8 Buffer Overflow

!/usr/bin/perl Title : Winamp 5.6.1 .m3u8 Stack Buffer Overflow Author : KedAns-Dz E-mail : [email protected] || [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : windows Impact : Stack Overflow Tested on : Windows XP sp3 FR Note...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Microsoft Windows OpenType Font (OTF) Driver Stack Overflow Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the OpenType Font OTF driver. To exploit this issue on Windows 7, Windows Vista, Windows Server 2008, and Windows Server 2008 R2, an attacker must entice an unsuspecting user into visiting a malicious...

OpenText FirstClass Client 11.005 - Code Execution

Exploit Title: OpenText FirstClass Client Delayed Code Executiion Date: Discovered 11/16/2010, Contacted OpenText 2/1/11 and 2/7/11, Released 4/11/2011 Author: Kyle Ossinger www.k0ss.net Email: [email protected] Software Link:...

Joomla extensions <=1.6.0 SQL Injection Exploit

Exploit for php platform in category web applications Title : Joomla extensions in ../extensions/languages/ : http://localhost/path/index.php/using-joomla/extensions/languages/email protectedAAAAA,&limit=3&limitstart=4 /2- in ../extensions/templates/ :...

Microsoft WordPad Text Converter (CVE-2011-0028) Remote Code Execution Vulnerability

Description Microsoft WordPad is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies Affected Avaya...

Joomla Virtuemart Latestprod Remote File Inclusion

Title : Joomla Module Virtuemart Latestprod RFI Vulnerability Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Include Tested on : Windows XP sp3 FR Note :...

Joomla component com_phocadownload Blind SQL Injection

Exploit for php platform in category web applications Title : Joomla component comphocadownload Blind SQL Injection Author : KedAns-Dz E-mail : email protected | email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Blind SQL...

Microsoft Windows Messenger ActiveX Control Remote Code Execution Vulnerability

Description Microsoft Windows Messenger ActiveX control 'msgsc.dll' is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow the attacker to execute arbitrary code...

Winamp 5.6.1 - '.m3u8' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47333/info Winamp is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can execute arbitrary code in the context of the affecte...

Microsoft HTML Help 6.1 - Local Stack Overflow

Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi Auriemma e-mail:...

VeryTools Video Spirit Pro

This module exploits a stack buffer overflow in Video Spirit use exploit/windows/fileformat/videospirit/visprj msf undefinedvisprj show actions ...actions... msf undefinedvisprj set ACTION msf undefinedvisprj show options ...show and set options... msf undefinedvisprj run This module requires...

Joomla Extensions 1.6.0 SQL Injection

Title : Joomla extensions in ../extensions/languages/ : http://localhost/path/index.php/using-joomla/extensions/languages/?filterorder=AAAAAAAAAAAAAAAAA.ked-h@exploit-id.com.AAAAAAAAAAAAAAAA,&limit=3&limitstart=4 /2- in ../extensions/templates/ :...

VeryTools Video Spirit Pro 1.70 Buffer Overflow

$Id: videospiritvisprj.rb 12304 2011-04-11 23:24:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

Joomla Gcalendar Remote File Inclusion

Title : Joomla component comgcalendar Remote File Inclusion Vulnerability Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Inclusion Vulnerability Tested o...

IrfanView 4.28 - ICO With Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)

$Id: videospiritvisprj.rb 12305 2011-04-11 23:32:41Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Joomla Phocadownload Blind SQL Injection

Title : Joomla component comphocadownload Blind SQL Injection Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Blind SQL Injection Tested on : Windows XP sp3 FR &...