ARM Polymorphic execve("/bin/sh", ["/bin/sh"], NULL) Shellcode Generator

No description provided by source. / Title: Generator polymorphic shellcode on ARM architecture Date: 2010-07-07 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of shellcodes http://www.shell-storm.org/shellcode/...

Sub Station Alpha 4.08 - (.rt) Local Buffer Overflow PoC

No description provided by source. /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include string.h include stdio.h define FIL3 testfile.rt char header= \x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x3...

PT-2014-2153

Name of the Vulnerable Software and Affected Versions SMPlayer version 0.6.9 Description The issue is related to a stack-based buffer overflow in the sub read line sami function, which can be triggered by a long string in a SAMI subtitle file. This can cause a denial of service, resulting in a...

Tilt - Terminal Ip Lookup Tool

Tilt: Terminal ip lookup tool, is an easy and simple open source tool implemented in Python for ip/host passive reconnaissance. It's very handy for first reconnaissance approach and for host data retrieval. Features Host to IP conversion IP to Host conversion DNS to IPs GeoIP Translation Extensiv...

PT-2014-1940

Name of the Vulnerable Software and Affected Versions 1С:Предприятие affected versions not specified Description The issue concerns a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. An attacker can manipulate input data to put the...

[SECURITY] Fedora 20 Update: perl-CGI-Application-4.50-9.fc20

CGI::Application is an Object-Oriented Perl module which implements an Abstract Class. It is not intended that this package be instantiated directly. Instead, it is intended that your Application Module will be implemented as a Sub-Class of CGI::Application...

[Burp Co2] A collection of enhancements for Portswigger's popuplar Burp Suite web penetration testing tool

Co2 includes several useful enhancements bundled into a single Java-based Burp Extension. The extension has it's own configuration tab with multiple sub-tabs for each Co2 module. Modules that interact with other Burp tools can be disabled from within the Co2 configuration tab, so there is no need...

Sub Encoder (optimised)

Encodes a payload using a series of SUB instructions and writing the encoded value to ESP. This concept is based on the known SUB encoding approach that is widely used to manually encode payloads with very restricted allowed character sets. It will not reset EAX to zero unless absolutely necessar...

Design/Logic Flaw

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

CVE-2011-3377

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

Oracle Identity Manager Identity Console (January 2014 CPU)

The remote host is missing the January 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, potentially affected by multiple, unspecified vulnerabilities in the Identity Console sub-component of Oracle Identity Manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle Supply Chain Products Suite - Remote Security

Oracle Supply Chain Products Suite - Remote Security source: https://www.securityfocus.com/bid/64836/info Oracle Supply Chain Products Suite is prone to a remote vulnerability in Oracle Demantra Demand Management. The vulnerability can be exploited over the 'HTTP' protocol. The 'DM Others' sub...

SuSE 11.2 / 11.3 Security Update : openssl-certs (SAT Patch Numbers 8681 / 8682)

openssl-certs was updated with the current certificate data available from mozilla.org. Changes : - Updated certificates to revision 1.95 Distrust a sub-ca that issued google.com certificates. 'Distrusted AC DG Tresor SSL'. bnc854367 Many CA updates from Mozilla : - new:...

Fedora Update for php-symfony2-Process FEDORA-2013-22422

Check for the Version of php-symfony2-Process OpenVAS Vulnerability Test Fedora Update for php-symfony2-Process FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 18 Update: php-symfony2-Process-2.2.10-1.fc18

The Process Component executes commands in sub-processes...

Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities

Document Title: =============== Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1165 Release Date: ============= 2013-12-09 Vulnerability Laboratory ID VL-ID: ==================================...

PT-2013-1280

Name of the Vulnerable Software and Affected Versions linstmgr.exe affected versions not specified Description The issue is related to a lack of input validation in the sub 416B78 procedure, which can lead to a buffer overflow when processing a specific RPC call number 0x10, referenced as...

DornCMS Application v1.4 - Multiple Web Vulnerabilities

Document Title: =============== DornCMS Application v1.4 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1113 Release Date: ============= 2013-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 11...

PT-2013-1279

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the absence of input validation in the sub 410855 procedure at specific memory addresses. This lack of validation can lead to a heap buffer overflow when...

PT-2013-1278

Name of the Vulnerable Software and Affected Versions Линтер Бастион affected versions not specified Description The issue is related to the absence of input validation in the sub 4101B4 procedure, which can lead to a heap buffer overflow when processing a specific RPC call 0x13 0x12 at addresses...