Section: .. / 0512-exploits /
| /// File Name: |
mailenable-imap-examine.py.txt |
Description:
|
Python exploit for a remote buffer overflow that exists in the MailEnable Enterprise 1.1 IMAP EXAMINE command. This vulnerability affects MailEnable Enterprise 1.1 without the ME-10009.EXE patch.
| | Author: | Mati Aharoni | | Related Exploit: | muts_mailenable_imap_examine.pm.txt | | File Size: | 5147 | | Last Modified: | Dec 28 00:10:21 2005 |
| MD5 Checksum: | 4d2052261c05aa5f9b5f8999662a166c |
|
| /// File Name: |
winCreateExp.txt |
Description:
|
Microsoft Windows CreateRemoteThread denial of service exploit.
| | Author: | nima Salehi | | Homepage: | http://www.Ashiyane.com | | File Size: | 4990 | | Last Modified: | Dec 2 11:56:21 2005 |
| MD5 Checksum: | 5802c87f4a75cb494ecd81206bc890ba |
|
| /// File Name: |
MS05-053.c |
Description:
|
Microsoft Windows Metafile (WMF) remote exploit which takes advantage of the bug known as ms05-053. This program creates a special .wmf file which crashes IE by overflowing the "mtNoObjects" header.
| | Author: | Winny Thomas | | File Size: | 4821 | | Last Modified: | Dec 14 05:12:31 2005 |
| MD5 Checksum: | 380f01f84a68f99123f0eaeefe547cc1 |
|
| /// File Name: |
hordeGraphic.txt |
Description:
|
All versions of the Horde IMP Webmail client are susceptible to cross site scripting attacks.
| | Author: | Igor | | File Size: | 4751 | | Last Modified: | Dec 9 11:22:17 2005 |
| MD5 Checksum: | 557d9a6ec0002e632527b6ca8121083c |
|
| /// File Name: |
bbs.c |
Description:
|
SimpleBBS versions 1.1 and below remote command execution exploit.
| | Author: | unitedasia | | File Size: | 4424 | | Last Modified: | Dec 13 23:24:12 2005 |
| MD5 Checksum: | 153d8fadee80804f06dda5d29fad686a |
|
| /// File Name: |
lyris_attachment_mssql.pm.txt |
Description:
|
This Metasploit module exploits a SQL injection flaw in the Lyris ListManager software for Microsoft SQL Server. This flaw allows for arbitrary commands to be executed with administrative privileges by calling the xp_cmdshell stored procedure. Versions 5.0 through 8.8a are affected.
| | Author: | H D Moore | | Homepage: | http://metasploit.com/ | | Related Exploit: | lyris-listmanager.txt | | File Size: | 4399 | | Last Modified: | Dec 14 01:14:50 2005 |
| MD5 Checksum: | f7190bb52ae23cbb1c9bd08505907146 |
|
| /// File Name: |
oracle9i_xdb_http.pm.txt |
Description:
|
This Metasploit module exploits a stack overflow in the authorization code of the Oracle 9i HTTP XDB service.
| | Author: | y0 | | File Size: | 4118 | | Last Modified: | Dec 14 03:23:36 2005 |
| MD5 Checksum: | 3904180db4222415f801532251f226a4 |
|
| /// File Name: |
cijfer-ccxpl.pl.txt |
Description:
|
Remote command execution exploit for CubeCart versions 3.0.6 and below that makes use of an input sanitization flaw in orderSuccess.inc.php.
| | Author: | cijfer | | File Size: | 3721 | | Last Modified: | Dec 31 04:02:57 2005 |
| MD5 Checksum: | 4657be8ac1e8639b13575ee1bf77e75c |
|
| /// File Name: |
perl-cal-29920.txt |
Description:
|
Perl-Cal version 2.99.20, the CGI script written by Acme Software, is susceptible to cross site scripting.
| | Author: | Sumit Siddharth | | File Size: | 3690 | | Last Modified: | Dec 14 00:00:06 2005 |
| MD5 Checksum: | b903eca64d8af5272644b0927b77790d |
|
| /// File Name: |
muts_mailenable_imap_examine.pm.txt |
Description:
|
Metasploit exploit for a remote buffer overflow that exists in the MailEnable Enterprise 1.1 IMAP EXAMINE command. This vulnerability affects MailEnable Enterprise 1.1 without the ME-10009.EXE patch.
| | Author: | Mati Aharoni | | Related File: | mailenable11.txt | | File Size: | 3621 | | Last Modified: | Dec 28 00:11:51 2005 |
| MD5 Checksum: | 0759dc48707c12312cfe8713c81d9517 |
|
| /// File Name: |
ibm_css.txt |
Description:
|
IBM Websphere 6 sample scripts are susceptible to cross site scripting vulnerabilities. Details provided.
| | Author: | dr_insane | | File Size: | 3434 | | Last Modified: | Dec 15 01:46:47 2005 |
| MD5 Checksum: | 6db36956f39a0952c9aaccb6b92359ef |
|
| /// File Name: |
AD20051202.txt |
Description:
|
WinEggDropShell Eternity version 1.7 is susceptible to preauth stack overflows. Proof of concept denial of service exploit included.
| | Author: | Sowhat | | Homepage: | http://secway.org/ | | File Size: | 3352 | | Last Modified: | Dec 3 00:40:55 2005 |
| MD5 Checksum: | e2a03f701231a1f11975df0e44fadadb |
|
| /// File Name: |
kapda-18.txt |
Description:
|
KAPDA Advisory #18 - Various WebWiz scripts suffer from SQL injection vulnerabilities due to a lack of input sanitization in check_user.asp. Details on exploitation provided.
| | Author: | DevilBox | | Homepage: | http://www.KAPDA.ir | | File Size: | 2925 | | Last Modified: | Dec 31 02:16:23 2005 |
| MD5 Checksum: | 23b2a1ef85c18c71cc4d9a6678fedfaa |
|
| /// File Name: |
fireburn.txt |
Description:
|
Proof of concept exploit for Firefox 1.0.4 for the InstallVersion.compareTo() vulnerability. Needs functional shellcode to work.
| | Author: | Aviv Raff | | Homepage: | http://aviv.raffon.net/ | | File Size: | 2912 | | Last Modified: | Dec 14 03:18:31 2005 |
| MD5 Checksum: | a7b9197c7c69f746d4d5c68ef60627c1 |
|
| /// File Name: |
openview_connectednodes_exec.pm.txt |
Description:
|
This Metasploit module exploits an arbitrary command execution vulnerability in the HP OpenView connectedNodes.ovpl CGI application. The results of the command will not be displayed to the screen.
| | Author: | Valerio Tesei | | File Size: | 2731 | | Related OSVDB(s): | 19057 | | Related CVE(s): | CVE-2005-2773 | | Last Modified: | Dec 14 03:26:31 2005 |
| MD5 Checksum: | ae5ae0d62af26ea683bce8a720fc56eb |
|
| /// File Name: |
VPNcheckpoint.txt |
Description:
|
Checkpoint SecureClient NGX Security Policy can be easily disabled.
| | Author: | Viktor Steinmann | | File Size: | 2511 | | Last Modified: | Dec 13 23:18:25 2005 |
| MD5 Checksum: | 87814a3c0a01296907ec97561588d477 |
|
| /// File Name: |
ThWboard.txt |
Description:
|
ThWboard version 3 beta 2.8 is susceptible to HTML injection, cross site scripting, and SQL injection attacks. Details provided.
| | Author: | trueend5 | | Homepage: | http://kapda.ir/ | | File Size: | 2349 | | Last Modified: | Dec 13 23:22:53 2005 |
| MD5 Checksum: | 83304c54e2bbb7b0fe3c031772285bab |
|
| /// File Name: |
freeHelpInject.txt |
Description:
|
It appears that the Free Help Desk software by Help Desk Reloaded leaves the install.php file in place post installation, allowing remote attackers to create accounts without any authentication or access.
| | Author: | BiPi_HaCk | | Homepage: | http://www.NightmareSecurity.net | | File Size: | 2210 | | Last Modified: | Dec 3 01:19:51 2005 |
| MD5 Checksum: | 59d3001cc14911fe89d6c74dc9fab115 |
|
| /// File Name: |
webCalSQL.txt |
Description:
|
WebCalendar version 0.1.0 is susceptible to SQL injection attacks via activity_log.php and edit_report_handler.php. layers_toggle.php is susceptible to CRLF injection. Exploitation details provided.
| | Author: | lwang | | File Size: | 2068 | | Last Modified: | Dec 2 11:57:58 2005 |
| MD5 Checksum: | 46ca1f68ff71adaff29ee3145854d376 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
