Oracle MySQL Eventum 2.3 Remote Script Insertion Vulnerabilities

Summary Eventum is a user-friendly and flexible issue tracking system that can be used by a support department to track incoming technical support requests, or by a software development team to quickly organize tasks and bugs. Description Eventum suffers from a cross-site scripting vulnerability...

MoviePlay 4.82 - '.lst' Local Buffer Overflow

!/usr/bin/env python MoviePlay 4.82 .lst Buffer Overflow Author: sickness Download : http://www.softpedia.com/get/Multimedia/Video/Video-Players/MoviePlay.shtml Previous version exploit can be found here: http://www.exploit-db.com/exploits/4051/ Tested : Windows XP Professional SP3 EN latest...

MoviePlay 4.82 - .lst Local Buffer Overflow

MoviePlay 4.82 - .lst Local Buffer Overflow !/usr/bin/env python MoviePlay 4.82 .lst Buffer Overflow Author: sickness Download : http://www.softpedia.com/get/Multimedia/Video/Video-Players/MoviePlay.shtml Previous version exploit can be found here: http://www.exploit-db.com/exploits/4051/ Tested ...

XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French...

Design/Logic Flaw

Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."...

Code injection

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

CVE-2011-0033

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

XM Easy Personal FTP Server 5.8.0 Denial Of Service

!/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French !/usr/bin/python print...

XM Easy Personal FTP Server 5.8.0 - 'TYPE' Denial of Service

!/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French !/usr/bin/python print...

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP...

PT-2011-2030 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7 Description: The issue arises from t...

CVE-2011-0090

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

CVE-2011-0045

The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to...

CVE-2011-0088

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

CVE-2011-0030

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...

Integer overflow

The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to...

Input validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

Privilege escalation

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...

CVE-2011-0039

The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...

CVE-2011-0030

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...