Section: .. / 0709-exploits /
| /// File Name: |
ipswitch80x-heap.txt |
Description:
|
IPSwitch IMail Server version 8.0x remote heap overflow exploit with connect-back shellcode.
| | Author: | axis | | Homepage: | http://www.ph4nt0m.org/ | | File Size: | 33412 | | Last Modified: | Sep 24 22:41:03 2007 |
| MD5 Checksum: | db2eb4ce0c14537dc2a3c1b1d3188860 |
|
| /// File Name: |
CORE-2007-0817.txt |
Description:
|
Core Security Technologies Advisory - Remote command execution, HTML and JavaScript injection vulnerabilities in AOL's Instant Messaging software. Versions 6.1, 6.2, Pro, and Lite are affected.
| | Homepage: | http://www.coresecurity.com/corelabs/ | | File Size: | 31509 | | Related CVE(s): | CVE-2007-4901 | | Last Modified: | Sep 25 22:07:53 2007 |
| MD5 Checksum: | 9f6886148c8923f1548101c7a3d286c4 |
|
| /// File Name: |
msvb-codeexec.txt |
Description:
|
Microsoft Visual Basic version 6.0 VBP_Open OLE local code execution exploit.
| | Author: | Koshi | | File Size: | 23096 | | Last Modified: | Sep 5 00:08:12 2007 |
| MD5 Checksum: | 5e3a5b151c362acff300991825a064f8 |
|
| /// File Name: |
hoagie_lighttpd.c |
Description:
|
Lighttpd version 1.4.17 and below FastCGI header overflow remote exploit.
| | Author: | Andi | | Homepage: | http://www.void.at/ | | File Size: | 16788 | | Last Modified: | Sep 20 20:47:57 2007 |
| MD5 Checksum: | aad99bd0395b4c024cf58996d587892c |
|
| /// File Name: |
aa2k7x.zip |
Description:
|
Proof of concept exploit that demonstrates format string and spoofing vulnerabilities in Alien Arena 2007 versions 6.10 and below.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | aa2k7x.txt | | File Size: | 14170 | | Last Modified: | Sep 5 20:56:43 2007 |
| MD5 Checksum: | 996f0b02a954b6e086cc7104809e74de |
|
| /// File Name: |
gmotor2.zip |
Description:
|
Proof of concept exploit for rFactor versions 1.250 and below that suffer from buffer overflow and code execution vulnerabilities.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related File: | rfactox.txt | | File Size: | 12010 | | Last Modified: | Sep 20 04:57:38 2007 |
| MD5 Checksum: | 2c04ffd658ffb146eb12c1a46c568bfb |
|
| /// File Name: |
xdiesel-traverse.txt |
Description:
|
X-Diesel Unreal Commander version 0.92 suffers from a remote directory traversal vulnerability. Proof of concept code included.
| | Author: | Gynvael Coldwind | | File Size: | 7971 | | Last Modified: | Sep 7 03:04:00 2007 |
| MD5 Checksum: | 5b6c8cf70a7e1c9b8469316331e1b384 |
|
| /// File Name: |
windowslive-remote.txt |
Description:
|
The GDI engine in Windows Live Messenger suffers from a malformed file overflow when handling specially crafted JPG/WMF/GIF/DOC/ICO files. Details on remote exploitation included.
| | Author: | Lostmon | | Homepage: | http://lostmon.blogspot.com/ | | File Size: | 6697 | | Last Modified: | Sep 24 23:49:14 2007 |
| MD5 Checksum: | 58556d35369ecd6d90a80e2ff6e20910 |
|
| /// File Name: |
airsensor-dos.txt |
Description:
|
Airsensor M520 httpd remote preauth denial of service buffer overflow proof of concept exploit.
| | Author: | Alex Hernandez | | File Size: | 6563 | | Last Modified: | Sep 18 22:30:35 2007 |
| MD5 Checksum: | 3266eb65c82294c12865f53eeb262f5f |
|
| /// File Name: |
shopscript-exec.txt |
Description:
|
Shop-Script FREE versions 2.0 and below remote command execution exploit.
| | Author: | InATeam | | Homepage: | http://inattack.ru/ | | File Size: | 6483 | | Last Modified: | Sep 18 11:46:10 2007 |
| MD5 Checksum: | 664ab253d5a905abef8801524f39243b |
|
| /// File Name: |
joomla15-sql.txt |
Description:
|
Joomla! version 1.5 Beta 1/Beta 2/RC 1 remote SQL injection exploit.
| | Author: | Silentz | | Homepage: | http://www.w4ck1ng.com/ | | File Size: | 6180 | | Last Modified: | Sep 4 23:32:13 2007 |
| MD5 Checksum: | a1d080b2fd8efee828b05bdad921fb30 |
|
| /// File Name: |
winimage-traverse.txt |
Description:
|
WinImage version 8.10 is susceptible to denial of service and directory traversal vulnerabilities.
| | Author: | j00ru | | Homepage: | http://vexillium.org/ | | File Size: | 6096 | | Last Modified: | Sep 18 12:39:48 2007 |
| MD5 Checksum: | 392e68e520cd76ac619d8e70fa173c79 |
|
| /// File Name: |
tc701-traverse.txt |
Description:
|
The Total Commander FTP client versions 7.01 and below suffer from a remote directory traversal vulnerability. Proof of concept code included.
| | Author: | Gynvael Coldwind | | File Size: | 5770 | | Last Modified: | Sep 7 03:02:23 2007 |
| MD5 Checksum: | ed64e7ad4378b16d1b810bbc50936c36 |
|
| /// File Name: |
trendmicro-overflow.txt |
Description:
|
Trend Micro ServerProtect remote stack overflow exploit that takes advantage of a boundary error condition within eng50.dll via a specially crafted RPC request to the SpntSvc.exe service. Binds a shell to TCP port 4444.
| | Author: | devcode | | File Size: | 5655 | | Related CVE(s): | CVE-2007-1070 | | Last Modified: | Sep 6 11:15:18 2007 |
| MD5 Checksum: | 6043e19f8ad08ab86b47a2925fb37874 |
|
| /// File Name: |
zomplog381-upload.txt |
Description:
|
Zomplog versions 3.8.1 and below suffer form an arbitrary file upload vulnerability.
| | Author: | InATeam | | Homepage: | http://inattack.ru/ | | File Size: | 5531 | | Last Modified: | Sep 30 02:10:15 2007 |
| MD5 Checksum: | a2253be0b71c1d9a269546061ca4b6f5 |
|
| /// File Name: |
magellan-traverse.txt |
Description:
|
Magellan Explorer version 3.32 build 305 suffers from a remote directory traversal vulnerability. Proof of concept code included.
| | Author: | Gynvael Coldwind | | File Size: | 5369 | | Last Modified: | Sep 7 03:04:55 2007 |
| MD5 Checksum: | dfbb2d7e0d2a6b844329758384f50199 |
|
| /// File Name: |
chupix-file.txt |
Description:
|
Chupix CMS version 0.2.3 suffers from a remote file disclosure vulnerability in download.php.
| | Author: | GolD_M | | Homepage: | http://www.tryag.cc/ | | File Size: | 4871 | | Last Modified: | Sep 18 11:35:31 2007 |
| MD5 Checksum: | 7ae44cfc17ceb108dc52870738d16dcc |
|
| /// File Name: |
jspwiki-xss.txt |
Description:
|
JSPWiki version 2.4.103 and 2.5.139 suffer from cross site scripting vulnerabilities.
| | Author: | Jason Kratzer | | File Size: | 4690 | | Last Modified: | Sep 25 21:19:30 2007 |
| MD5 Checksum: | e3d808d1f7b3c2b1e57f6f24916f0678 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
