477 matches found
Microsoft PowerPoinr memory corruption
0-day vulberability in SlideShowWindows.View.GotoNamedShow function is used for malware installation...
TorrentFlux User-Agent XSS Vulnerability
http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/ Name: TorrentFlux User-Agent XSS Vulnerability Published: 2006-10-06 Critical Level: Moderate Type: Cross-Site Scripting Where: Remote Status: 0-Day Software: Torrentflux 2.1 Discoverer: Steven Roddis...
Microsoft Windows / Internet Explorer 0-day vulnerability
Microsoft Vector Graphics Rendering Library vulnerability is used for hidden malware installation...
Microsoft PowerPoint 0-day vulnerability
No description provided...
[SA21552] Ichitaro Document Viewer Buffer Overflow Vulnerability
TITLE: Ichitaro Document Viewer Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA21552 VERIFY ADVISORY: http://secunia.com/advisories/21552/ CRITICAL: Extremely critical IMPACT: System access WHERE: From remote SOFTWARE: Ichitaro for Linux http://secunia.com/product/11596/ Ichitaro 9.x...
[Full-disclosure] 0-day XP SP2 wmf exploit
Description: yet another 'windows meta file' WMF denial of service exploit. System affected: + Windows XP SP2, + Windows 2003 SP1, + Windows XP SP1, + Windows XP + Windows 2003 Tech info: page fault in gdi32!CreateBrushIndirect because invalid pointer access. Incorrect short to void sign extensio...
gdiplus.pl.txt
!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...
Gdiplus.dll division by 0
!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...
[Full-disclosure] Microsoft PowerPoint 0-day Vulnerability FAQ document written
I have written FAQ document including 33 items about the recently reported 0-day vulnerability in PowerPoint. This vulnerability is being exploited by Trojan horse including keylogger features. The document entitled as Microsoft PowerPoint 0-day Vulnerability FAQ is located at my SecuriTeam Blogs...
msword-hlink-ohday.txt
Hi people, the same problem concerning hlink.dll already exploited in excel is present even in Microsoft Word, but Word 2003 seems, luckily, not vulnerable. this one is the public 0-day I made for Microsoft Word. the author is "SYS 49152" obviusly it's a local sploit .. best regards. SYS 49152...
Microsoft Word 20002003 - Hlink Local Buffer Overflow
Microsoft Word 20002003 - Hlink Local Buffer Overflow !/bin/perl Microsoft Word hlink 0-day by SYS 49152 this POC works only with: win 2ksp4 ENG + word 2000/XP all versions. win XP ENG sp1/sp2 + word XP 2002 SP3. Word 2003 is not vulnerable. bindshell on port 49152 hey kids.. I hope you know how ...
Targeted attack: experience from the trenches
Targeted attack: experience from the trenches Published: 2006-05-19, Last Updated: 2006-05-19 17:36:01 UTC by Chris Carboni Version: 2click to highlight changes Learning lessons from incidents is a very important part of incident handling. Yet with targeted attacks it is very hard as you need to...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Expl (0-Day)
Exploit for unknown platform in category remote exploits =================================================================== Winamp include define BUFLEN 0x045D define PLAYLISTFILE "crafted.pls" char szPlayListHeader1 = "playlist\r\nFile1=\\"; char szPlayListHeader2 =...
Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
Exploit for unknown platform in category web applications ======================================================== Wordpress = 1.5.1.3 Remote Code Execution 0-Day Exploit ======================================================== ?php echo "Wordpress = 1.5.1.3 - remote code execution 0-DDAAYY...
Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
No description provided by source. ?php echo "Wordpress = 1.5.1.3 - remote code execution 0-DDAAYY exploit\n"; echo "C Copyright 2005 Kartoffelguru\n\n"; echo "! info: requires registerglobals turned on on target host\n\n"; if !extensionloaded'curl' die "- you need the curl extension...
linux/SPARC portbind port 8975 284 bytes
Exploit for linux/sparc platform in category shellcode ======================================== linux/SPARC portbind port 8975 284 bytes ======================================== / 0-day portbind shellcode for all those Sun machines running linux.. Coded from scratch, so i take all the credits. It...
The SUPER Bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...