Section: .. / 0601-exploits /
| /// File Name: |
MS05-055Exp.rar |
Description:
|
MS05-055 local privilege escalation exploit tested on Windows2000 pro sp4 with and without rollup 1 - Chinese and English versions. Takes advantage of a vulnerability in the Windows Kernel APC Data-Free. Includes C source.
| | Author: | SoBeIt | | File Size: | 54187 | | Last Modified: | Jan 6 10:32:10 2006 |
| MD5 Checksum: | 81029bdb3889e6fc2d3cd1307e150698 |
|
| /// File Name: |
20051228.ie_xp_pfv_metafile.pm |
Description:
|
Perl module which exploits the WMF SetAbortProc in the Windows Picture and Fax Viewer found in Windows XP and 2003. This vulnerability uses a corrupt Windows Metafile to execute arbitrary code and was reported to the Bugtraq mailing list after being discovered in the wild at the following URL: http://unionseek[DOT]com/d/t1/wmf_exp.htm. Unofficial patch here.
| | Author: | H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 50586 | | Last Modified: | Jan 4 20:50:37 2006 |
| MD5 Checksum: | 3260de4f252b0eff3a96c08dcbf37c99 |
|
| /// File Name: |
eStara.c |
Description:
|
eStara Softphone buffer overflow exploit that makes use of a vulnerability in the SIP stack processing. Versions 3.0.1.14 and 3.0.1.46 were verified vulnerable.
| | Author: | Zwell | | Homepage: | http://www.donews.net/zwell | | File Size: | 30925 | | Last Modified: | Jan 12 02:05:37 2006 |
| MD5 Checksum: | a8e48d754d17cc984698828026578bb6 |
|
| /// File Name: |
HYSA-2006-001.txt |
Description:
|
HYSA-2006-001 h4cky0u.org Advisory 010 - phpBB 2.0.19 search.php and profile.php DOS Vulnerability
| | Author: | h4cky0u | | Homepage: | http://www.h4cky0u.org | | File Size: | 15961 | | Last Modified: | Jan 26 11:11:07 2006 |
| MD5 Checksum: | 527fddee8232f657ffeeb1fe2176efe4 |
|
| /// File Name: |
HYSA-2006-002.txt |
Description:
|
HYSA-2006-002 h4cky0u.org Advisory 011 - Phpclanwebsite 1.23.1 Multiple Vulnerabilities
| | Author: | h4cky0u | | Homepage: | http://www.h4cky0u.org | | File Size: | 13081 | | Last Modified: | Jan 26 11:12:33 2006 |
| MD5 Checksum: | d7c03e183639aea5f891076876d4b1ea |
|
| /// File Name: |
phpinclusion.c |
Description:
|
Proof of concept file inclusion exploit for PHP scripts that suffer from this sort of vulnerability.
| | Author: | fabio, b0x | | Homepage: | http://www.pcbsd.ro | | File Size: | 11112 | | Last Modified: | Jan 15 03:07:03 2006 |
| MD5 Checksum: | 81ac2c038d4cfd6996b4782e5d1cc1f0 |
|
| /// File Name: |
ms05-055.c |
Description:
|
Microsoft Windows Kernel APC Data-Free local privilege escalation vulnerability exploit.
| | Author: | SoBeIt | | File Size: | 10589 | | Last Modified: | Jan 8 19:57:55 2006 |
| MD5 Checksum: | 3364bf57dfbfff5b82e1c2917e44cfc5 |
|
| /// File Name: |
rt-sa-2005-15.txt |
Description:
|
BSD Securelevels can be circumvented at runtime. By mounting another filesystem, immutable files can be masked. Masking means placing an arbitrary file at the location of an immutable file, without changing the immutable file itself. Details on how this can be exploited are included.
| | Homepage: | http://www.redteam-pentesting.de/ | | File Size: | 7233 | | Related CVE(s): | CVE-2005-4351 | | Last Modified: | Jan 10 05:49:52 2006 |
| MD5 Checksum: | 7b446b5372c0e46bf0489f75da101c51 |
|
| /// File Name: |
20051231.ie_xp_pfv_metafile.pm |
Description:
|
Microsoft Windows Metafile (WMF) SetAbortProc remote code execution exploit which takes advantage of a vulnerability in the GDI library by using the 'Escape' metafile function to execute arbitrary code through the SetAbortProc procedure. Tested against Windows XP and 2003.
| | Author: | H D Moore, San, O600KO78RUS | | Homepage: | http://www.metasploit.com | | Related File: | WMFHotfix-1.4.msi | | File Size: | 6170 | | Last Modified: | Jan 4 20:35:47 2006 |
| MD5 Checksum: | d3193306031cf79a65054de5ec58c6f7 |
|
| /// File Name: |
secunia-ADOdb.txt |
Description:
|
Secunia Research has discovered two security issues in ADOdb, which can be exploited by malicious people to disclose system information, execute arbitrary SQL code, and potentially compromise a vulnerable system. Details provided. ADOdb versions 4.66 and 4.68 for PHP are affected.
| | Author: | Andreas Sandblad | | Homepage: | http://www.secunia.com | | File Size: | 5227 | | Last Modified: | Jan 10 06:05:56 2006 |
| MD5 Checksum: | f7443f571366df08d500f307702c21ee |
|
| /// File Name: |
ihs_winrar.c |
Description:
|
WinRAR local buffer overflow exploit for versions 3.3.0 and below.
| | Author: | c0d3r | | File Size: | 5207 | | Last Modified: | Jan 8 19:53:22 2006 |
| MD5 Checksum: | 68a94ebfd48c42c061dfb8437d23f021 |
|
| /// File Name: |
ISAA-2006-001.txt |
Description:
|
123flashchat server versions 5.1 and below suffer from directory traversal attacks that allow for arbitrary file creation.
| | Author: | Jesus Olmos Gonzalez | | File Size: | 4698 | | Last Modified: | Jan 21 19:58:32 2006 |
| MD5 Checksum: | 6b899581652a6d00c78163f8d0a75085 |
|
| /// File Name: |
kapda-23.txt |
Description:
|
The WorldsEnd.NET Free Ping script is susceptible to a restriction bypass condition.
| | Author: | cvh | | Homepage: | http://www.KAPDA.ir | | File Size: | 4677 | | Last Modified: | Jan 29 22:40:21 2006 |
| MD5 Checksum: | e384226759c240ec8c678aa282f1d49d |
|
| /// File Name: |
cijfer-cnxpl.pl.txt |
Description:
|
CuteNews versions 1.4.1 and below remote command execution exploit.
| | Author: | cijfer | | File Size: | 4283 | | Last Modified: | Jan 3 04:00:19 2006 |
| MD5 Checksum: | 9cbbd77a8e6c1ac666176d216b180652 |
|
| /// File Name: |
cubecartXSS.txt |
Description:
|
CubeCart version 3.0.7-p11 is susceptible to multiple cross site scripting flaws.
| | Author: | Lostmon | | Homepage: | http://lostmon.blogspot.com/ | | File Size: | 4230 | | Last Modified: | Jan 22 01:05:49 2006 |
| MD5 Checksum: | 2b95fbc1a0ca0c7303f48d0beaa41035 |
|
| /// File Name: |
aimXSS.txt |
Description:
|
Various America Online (AOL) Instant Messenger scripts are susceptible to cross site scripting attacks. Full details provided.
| | Author: | Simo Ben youssef | | Homepage: | http://www.morx.org | | File Size: | 3898 | | Last Modified: | Jan 10 05:16:28 2006 |
| MD5 Checksum: | 0cae6bfe595f539866fb1e2ad8801e0d |
|
| /// File Name: |
kapda-22.txt |
Description:
|
Azbb versions 1.1.00 and below suffer from cross site scripting vulnerabilities. NASL plugin to test for this included.
| | Author: | Roozbeh Afrasiabi | | Homepage: | http://www.KAPDA.ir | | File Size: | 3632 | | Last Modified: | Jan 29 22:35:30 2006 |
| MD5 Checksum: | c73436eb82588baf20ab5c34d114e159 |
|
| /// File Name: |
DMA-2006-0112a.txt |
Description:
|
Using ussp-push from the Toshiba Bluetooth Stack versions 4.00.23(T) and below, an attacker can place a trojaned file anywhere on the filesystem.
| | Author: | Kevin Finisterre | | Homepage: | http://www.digitalmunition.com/ | | File Size: | 3620 | | Last Modified: | Jan 15 17:54:17 2006 |
| MD5 Checksum: | 13c47dbcf05a5bc3f1fedca80adbb8b8 |
|
| /// File Name: |
eyeBeam_dos.c |
Description:
|
eyeBeam softphone remote denial of service SIP header mishandling exploit.
| | Author: | ZwelL | | File Size: | 3619 | | Last Modified: | Jan 22 00:42:15 2006 |
| MD5 Checksum: | 2d22cac710562f5f5ed1b16714e701f8 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
