WebDrive缺少安全描述符本地权限提升漏洞

BUGTRAQ ID: 37955 CVE ID: CVE-2009-4606 WebDrive是Windows化的文件传输软件，可将FTP服务器设置为硬盘盘符。 WebDrive所安装的WebDrive服务没有设置安全描述符，本地用户可以通过stop命令终止服务、使用config命令修改binPath变量并执行任意命令，或通过start命令重启服务。 South River Technologies WebDrive 9.02 厂商补丁： South River Technologies ------------------------...

MySQL yaSSL CertDecoder::GetName Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.9.8 and earlier implementation bundled with MySQL. By sending a specially crafted client certificate, an attacker can execute arbitrary code. This vulnerability is present within the CertDecoder::GetName function inside...

Microsoft Internet Explorer 6 / 7 Local Crash

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html document.createElement"html".outerHTML Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts: infoatsecuritylab.ir &...

Another to bypass the firewall method-vulnerability warning-the black bar safety net

Using the Http channel software can break through the firewall restrictions, the use of only Http access permissions access to other Internet applications. So what is the channel? Here the so-called channel refers to a method to bypass the firewall port shield means of communication. The firewall...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

Winamp v5.572 whatsnew.txt Stack Overflow Exploit

No description provided by source. view source print? Tested on: Windows xp sp3 Code : !/usr/bin/perl Winamp v5.572 whatsnew.txt Stack Overflow Exploit Original : http://www.exploit-db.com/exploits/11248 Exploit by : Dzattacker [email protected] win32exec - EXITFUNC=process CMD=calc my...

Winamp 5.572 - Local Overflow (SEH)

Winamp 5.572 - Local Overflow SEH !/usr/bin/python Exploit Title: Winamp tecr0c@backtrack:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error : Connection timed out UNKNOWN 192.168.2.24 4444 ? open Microsoft Windows XP Version 5.1.2600 C...

Safari 4.0.4 Crash

The following piece of javascript will crash Safari nicely when triggered using one of the methods described below. With my limited knowledge I am unable to tell if it's exploitable or not. I therefore turn it over to "the internet". tested on Safari 4.0.4, Win XP Pro SP3...

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

Microsoft ie 6&7 crash

No description provided by source. tested on ie6/ie7, Win XP Pro SP3 http://sebug.net/exploit/19005/ 1、 =========================================================== scriptdocument.createElement"li".value=3/script =========================================================== 2、...

AIC Audio Player 1.4.1.587 Local Crash PoC

Exploit for unknown platform in category local exploits ========================================== AIC Audio Player 1.4.1.587 Local Crash PoC ========================================== !/usr/bin/python Title: AIC Audio Player 1.4.1.587 Local Crash PoC Author: b0telh0 Link:...

MS Internet Explorer 6/7 - Local crash

Exploit for unknown platform in category local exploits ====================================== MS Internet Explorer 6/7 - Local crash ====================================== Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium...

South River Technologies WebDrive Service Bad Security Descriptor Local

Exploit for unknown platform in category local exploits ============================================================================================ South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation...

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Du...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

P2GChinchilla HTTP Server Denial Of Service

!/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote Denial Of Service Exploit Auther : Zer0 Thunder Msn : [email protected] ==------ Exploit Title: P2GChinchillaTM HTTP Server 1.1.1 Remote Denial Of Service Exploit Date: 22/01/2010 Author: Zer0 Thunder Site :...

AIC Audio Player 1.4.1.587 - Local Crash (PoC)

AIC Audio Player 1.4.1.587 - Local Crash PoC !/usr/bin/python Title: AIC Audio Player 1.4.1.587 Local Crash PoC Date: 01-26-2010 Author: b0telh0 Link: http://www.aic-media.com/Download/SetupAICAudioPlayer.exe Tested on: Windows XP SP3 I couldn't even debug it. There's some anti-debugging...

Microsoft IE 6&7 Crash Exploit

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...

Winamp 5.572 - Local Overflow (SEH)

!/usr/bin/python Exploit Title: Winamp tecr0c@backtrack:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error : Connection timed out UNKNOWN 192.168.2.24 4444 ? open Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp...

Winamp v5.572 whatsnew.txt Stack Overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Winamp v5.572 whatsnew.txt Stack Overflow Exploit ================================================= Tested on: Windows xp sp3 Code : !/usr/bin/perl Winamp v5.572 whatsnew.txt Stack Overflow...