Microsoft Internet Explorer 6 - mshtmled.dll Denial of Service

Microsoft Internet Explorer 6 - mshtmled.dll Denial of Service !-- Vendor Status: Ask Microsoft. Discovered by: Tom Ferris Related...

CVE-2005-2117: Undefined Security Weakness

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code...

Opera 8.02 - Remote Denial of Service (2)

Opera 8.02 - Remote Denial of Service 2 \n" html.write"\n" buff1 = 'A'32499 html.write"\n"+buff1+"\n" buff2 = 'B'153 html.write"\n" html.write"" html.close Cheers! --...

CVE-2005-2120: Undefined Security Weakness

Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...

CVE-2005-1985: Undefined Security Weakness

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

Microsoft Plug and Play fails to properly validate user supplied data

Overview Microsoft Plug and Play contains a flaw in message buffer handling that may result in local or remote arbitrary code execution or a denial-of-service condition. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system to...

Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key authentication and the WEP keys of the interface may be obtained by a local unauthorized...

Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal Spanish MS05-039 / HOD-ms05039-pnp-expl-spanish.c 25.Aug.2005 Very slightly modified version by Roman Medina Tested on Win2k SP4 Spanish. Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c...

MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)

No description provided by source. / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON [email protected] Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus...

IE-Msddsdll-0day.txt

!/usr/bin/perl Microsoft Internet Explorer "Msdds.dll" Remote Code Execution Exploit 0day Bindshell on port 28876 - Vulnerability discovered and exploited by Anonymous PoC code ripped from Berend-Jan Wever's Internet-Exploiter Vulnerable : EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F Msdds.dll Tested on ...

mdaemon_imap.pm.txt

package Msf::Exploit::mdaemonimap; use strict; use base 'Msf::Exploit'; use Msf::Socket::Tcp; use Pex::Text; my $advanced = ; my $info = 'Name' = 'Mdaemon 8.0.3 IMAD CRAM-MD5 Authentication Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'Pri...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit ============================================================ This file is part of the Metasploit Framework and may be...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal MS05-039 / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...

MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)

$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Internet Explorer - blnmgr.dll COM Object Remote (MS05-038)

Microsoft Internet Explorer - blnmgr.dll COM Object Remote MS05-038 !-- placed into html for your testing. /str0ke !/usr/bin/perl Internet Explorer COM Objects Instantiation Proof of Concept Exploit MS05-038 Bindshell on port 28876 - Based and ripped from Berend-Jan Wever's IE Exploit Vulnerable...

MS05-043: Vulnerability in Printer Spooler Service Could Allow Remote Code Execution (896423) (uncredentialed check)

The remote host contains a version of the Print Spooler service that may allow an attacker to execute code on the remote host or crash the spooler service. An attacker can execute code on the remote host with a NULL session against : - Windows 2000 An attacker can crash the remote service with a...

MS05-043: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)

The remote host contains a version of the Print Spooler service that is vulnerable to a security flaw that could allow an attacker to execute code on the remote host or crash the spooler service. An attacker can execute code on the remote host with a NULL session against : - Windows 2000 An...