HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX HTTP server. By sending a specially crafted HTTP request containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via FTP. This...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Oracle Document Capture 10g 10.1.3.5.0. Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll 6.0.1.0. When passing an overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...

AwingSoft Winds3D Player SceneURL Buffer Overflow

This module exploits a data segment buffer overflow within Winds3D Viewer of AwingSoft Awakening 3.x WindsPly.ocx v3.6.0.0. This ActiveX is a plugin of AwingSoft Web3D Player. By setting an overly long value to the 'SceneURL' property, an attacker can overrun a buffer and execute arbitrary code...

Microsoft Windows Active Directory Denial of Service Vulnerability (973309)

This host is missing a critical security update according to Microsoft Bulletin MS09-066. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Win32k内核态驱动本地权限提升（MS09-065）

BUGTRAQ ID: 36939,36941 CVE ID: CVE-2009-1127,CVE-2009-2513 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的Win32k内核态驱动（Win32k.sys）没有正确地验证传送给Windows内核系统调用的参数，以及用户态通过GDI内核组件所传送的输入。拥有有效的登录凭据且能够本地登录的攻击者可以利用这些漏洞执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

PT-2009-4920 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description: The issue arises from the Graphics Device Interface GDI in the kernel not properly...

Microsoft Security Bulletin MS09-065 - Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)

Microsoft Security Bulletin MS09-065 - Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution 969947 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in the...

PT-2009-4921 · Microsoft · Windows Server 2003 +3

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2 Description: A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to...

Microsoft Security Bulletin MS09-066 - Important Vulnerability in Active Directory Could Allow Denial of Service (973309)

Microsoft Security Bulletin MS09-066 - Important Vulnerability in Active Directory Could Allow Denial of Service 973309 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Active Directory directory...

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution (974783)

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution 974783 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows...

XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)

Exploit Title: XM Easy Personal FTP Server LIST DoS Meta Date: 4/17/2010 Author: Jeremiah Talamantes Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP, SP2 CVE : N/A Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.p This...

Microsoft Active Directory LDAP Request Stack Exhaustion Denial Of Service Vulnerability

Description Microsoft Active Directory is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the server, denying access to legitimate users. Technologies Affected Avaya Meeting Exchange - Client Registration Server Avaya Meeting Exchange - Enterprise Edition...

XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)

XM Easy Personal FTP Server 5.8.0 - Denial of Service Metasploit Exploit Title: XM Easy Personal FTP Server LIST DoS Meta Date: 4/17/2010 Author: Jeremiah Talamantes Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP, SP2 CVE : N/A Code :...

Kingsoft Internet Security 9 - Denial of Service

Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report Timeline 3 Technical details 4 The Cod...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This module exploits a stack buffer overflow in SafeNet SoftRemote Security Policy Editor 'SafeNet SoftRemote GROUPNAME Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in SafeNet SoftRemote Security Policy Editor MSFLICENSE, 'Author' = 'MC' , 'References' = 'CVE'...

The Low-Down on Daonol

A relatively new trojan has been making the rounds and causing some problems, particularly on Windows XP systems. Trojan:Win32/Daonol is malware which hooks various system calls in order to steal credential information and redirect some web traffic. It also protects itself by keeping some...

Multiple Panda Security Products Local Privilege Escalation Vulnerability

No description provided by source. Application: Panda Global Protection 2010 Panda Internet Security 2010 Platforms: Windows XP Professional SP & windows Vista SP1 Exploitation: Local Privilege Escalation Date: 2009-10-27 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical...

Windows XP Pro Sp2 English "Wordpad" Shellcode (15 bytes)

No description provided by source. ========================================================= Windows XP Pro Sp2 English "Wordpad" Shellcode 15 bytes ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Joomla 1.5.12 Code Execution Via TinyMCE

?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at nibblesec.org http://blog.nibblesec.org / / daath@shaytan:$ php...