16583 matches found
Advantech WebAccess dvs.ocx GetColor Buffer Overflow
This module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This module has been tested successfully on Windows XP SP3...
Update Your Java to Patch 20 Vulnerabilities Or Just Disable it
Today, Oracle has released its quarterly Critical Patch Update CPU for the month of July, as part of its monthly security bulletin, in which it fixes a total of 113 new security vulnerabilities for hundreds of the company’s products. The security update for Oracle’s popular browser plug-in Java...
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation
A vulnerability within the VBoxGuest driver allows an attacker to inject memory they control into an arbitrary location they define. This can be used by an attacker to overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently calling NtQueryIntervalProfile on Windows XP SP3 system...
Oracle July 2014 Critical Patch Update
Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...
Kolibri Web Server 2.0 - GET (SEH)
Kolibri Web Server 2.0 - GET SEH !/usr/bin/python Exploit Title : Kolibri WebServer 2.0 Get Request SEH Exploit Exploit Author : Revin Hadi S Date : 14/07/2014 Vendor : http://www.senkas.com Version : 2.0 Tested on : Windows XP SP2 Eng, Windows Server 2003 Eng, Win 7 SP1 Eng import socket, sys he...
Kolibri Web Server 2.0 - GET (SEH)
!/usr/bin/python Exploit Title : Kolibri WebServer 2.0 Get Request SEH Exploit Exploit Author : Revin Hadi S Date : 14/07/2014 Vendor : http://www.senkas.com Version : 2.0 Tested on : Windows XP SP2 Eng, Windows Server 2003 Eng, Win 7 SP1 Eng import socket, sys help = """Kolibri WebServer 2.0 Get...
PCMAN FTP 2.07 PORT 命令 缓冲区溢出漏洞（0day）
No description provided by source. Exploit Title: PCMAN FTP 2.07 PORT Command Buffer Overflow Exploit Date: 07 13,2014 Exploit Author: niubl Version: 2.07 Tested on: Windows xp sp3 chinese Email: [email protected] thank for Mahmod Mahajna. i learn from him. 漏洞太多了这个版本软件 import socket as s from sys...
OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege
Summary Private Tunnel is a new approach to true Internet security creating a Virtual Private Tunnel VPT or Virtual Private Network VPN that encrypts, privatizes, and protects your Internet traffic. Description Private Tunnel application suffers from an unquoted search path issue impacting the Co...
Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...
Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...
Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow Exploit
This Metasploit module exploits an stack based buffer overflow on Yokogawa CS3000. The vulnerability exists in the service BKFSimvhfd.exe when using malicious user-controlled data to create logs using functions like vsprintf and memcpy in a insecure way. This Metasploit module has been tested...
Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...
Core FTP LE 2.2 - Heap Overflow PoC
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...
Browser Password Remover - Browser Website Login Password Removal Software
Browser Password Remover is the free software to quickly display and remove all the stored website login passwords from popular browsers. Most of the web browsers allow users to remember passwords and stores them into local database file. This file and all the stored passwords within it can be...
Docebo 3.6.0.2 (stable) Local File Inclusion
No description provided by source. Exploit Title: Docebo 3.6.0.2 stable Local File Inclusion Date: 2010-01-06 Author: Zer0 Thunder Site : http://www.docebolms.org/ Software Link: http://www.docebolms.org/doceboCms/ Version: 3.6.0.2 Tested on: Windows XP sp2 WampServer 2.0i CVE : Code : Exploit :...
AoA Audio Extractor 2.x - ActiveX ROP exploit
No description provided by source. html p centerAoA Audio Extractor v2.x ActiveX ROP exploitbr / Hadji Samir - s-dz|AT|hotmail.fr & mrme - mrme|AT|net-ninja.netbr //center /p !-- some notes about the exploit: - Tested working on a fully patched windows XP sp3 IE8 VM Last update was done on...
J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow Exploit
No description provided by source. !-- Exploit Title: J-Integra v2.11 ActiveX SetIdentity Buffer Overflow Exploit Found By: DrIDE Download: http://j-integra.intrinsyc.com/ Greets: bz1p, [email protected] for finding the app. Tested on: XP SP3 IE7 CVE: 0day Notes: This is not the same control as...
Sulata iSoft (stream.php) Local File Disclosure Exploit
No description provided by source. ========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10...
South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation
No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated...
DmxReady Links Manager 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inclinksmanager.asphttp://demo.dmxready.com/applications/CatalogManager/inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link:...