Brett Moore - Security Researcher - Exploit Intelligence Platform

CVE-2008-2286 METASPLOIT ruby WORKING POC

Symantec Altiris Deployment Solution - SQL Injection

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

View Code

CVE-2004-1119 EXPLOITDB c WORKING POC

Nullsoft Winamp - Buffer Overflow

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.

View Code

CVE-2004-1317 EXPLOITDB c WORKING POC

Netcat for Windows 1.1 - Buffer Overflow

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.

View Code

CVE-2008-2286 EXPLOITDB ruby WORKING POC

Symantec Altiris Deployment Solution - SQL Injection

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

View Code

CVE-2007-2216 EXPLOITDB text WORKING POC

Internet Explorer 5.01-7 - RCE

The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."

View Code

CVE-2003-0526 EXPLOITDB text WORKING POC

Microsoft ISA Server 2000 - XSS

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."

View Code

CVE-2008-4250 EXPLOITDB ruby WORKING POC

Microsoft Windows 2000 - Code Injection

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

View Code

CVE-2006-6597 EXPLOITDB text WRITEUP

HyperAccess 8.4 - Command Injection

Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe.

View Code

CVE-2003-0659 EXPLOITDB c++ WORKING POC

Windows NT-Server 2003 - Buffer Overflow

Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.

View Code

CVE-2002-1230 EXPLOITDB text WRITEUP

NetDDE Agent - RCE

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."

View Code

EIP-2026-117586 EXPLOITDB c WORKING POC

Microsoft Windows XP/2000 - PostThreadMessage() Arbitrary Process Killing

View Code