FreeBSD/x86 encrypted setuid(0) execve /bin/sh 51 bytes

/ Title : 51 bytes FreeBSD/x86 encrypted setuid0 execve /bin/sh Date : Sun May 29 08:07:11 UTC 2011 Author; mywisdom email protected Web : devilzc0de.org Gopher: gopher://sdf.org/1/users/wisdomc0 Blog : http://myw1sd0m.blogspot.com/ Tested on: FreeBSD 8.2-RELEASE i386 special thanks to...

Adobe Reader 'CoolType.dll' TTF font overflow vulnerability analysis-vulnerability warning-the black bar safety net

Author: Nicolas Joly Translator: riusksk（springs brother: the http://riusksk.blogbus.com） This article aims to share with you some information about the recent Adobe Acrobat/Reader 0-Day exploitCVE-2 0 1 0-2 8 8 3The technical details. In VUPEN tissue, we analyzed a large number of vulnerabilitie...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)

when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2011:0136-1)

The subversion server could be crashed by clients inside SVNParentPath. Additionally an Out Of Memory condition via 'blame -g' has been fixed. CVE-2010-4539 and CVE-2010-4644 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)

when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...

openSUSE Security Update : libpango-1_0-0 (openSUSE-SU-2011:0221-1)

Specially crafted font files could cause a heap corruption in applications linked against pango CVE-2011-0064, CVE-2011-0020. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpango-10-0-4076...

Fedora 15 : widelands-0-0.24.build16.fc15 (2011-6133)

Rebase to new upstream release build16 - Besides various enhancements this also fixes an arbitrary file overwrite vulnerability, which could be exploited when connecting to malicious servers for internet play! Note that Tenable Network Security has extracted the preceding description block...

OpenMyZip 0.1 .ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: OpenMyZip V0.1 .ZIP File Buffer Overflow Vulnerability +Date: 02\05\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/OpenMyZip/3000-22504-10657274.html +Version: v0.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my...

OpenMyZip 0.1 - '.zip' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47678/info OpenMyZip is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will...

Adobe Flash 0-day

No description provided by source. exploit.html: ---------------------------------- html head script type="text/javascript" function getCookieValoffset var endstr = document.cookie.indexOf";", offset; if endstr == -1 endstr = document.cookie.length; return unescapedocument.cookie.substringoffset,...

SimplyPlay v.66 .pls File Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66...

SimplyPlay 66 - .pls Local Buffer Overflow

SimplyPlay 66 - .pls Local Buffer Overflow !/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On:...

SimplyPlay 66 - '.pls' Local Buffer Overflow

!/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A...

PlaylistMaker 1.5 - .txt Local Buffer Overflow

PlaylistMaker 1.5 - .txt Local Buffer Overflow !/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5...

PlaylistMaker 1.5 - '.txt' Local Buffer Overflow

!/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE:...

Vallen Zipper V2.30 .ZIP File Heap Overflow

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use...

Wordtrainer 3.0 - .ord Local Buffer Overflow

Wordtrainer 3.0 - .ord Local Buffer Overflow !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3...

Vallen Zipper 2.30 ZIP Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

MikeyZip 1.1 ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename =...

MikeyZip 1.1 .ZIP File Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portugues...