Publish-It 3.6d - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Title: Publish-It 3.6d - Buffer Overflow SEH Exploit Date: 2/16/15 Vulnerability: Discovery and PoC by Core Security http://www.exploit-db.com/exploits/31461/ Exploit Author: jakx Andrew Smith of Sword & Shield Enterprise...

Publish-It PUI Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Publish-It PUI Buffer Overflow SEH', 'Description' = %q This module exploits a stack based buffer overflow in Publish-It when...

Publish-It - '.PUI' Local Buffer Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Publish-It PUI Buffer Overflow SEH', 'Description' = %q This module exploits a stack based buffer overflow in Publish-It when...

Publish-It 3.6d - PUI Buffer Overflow (SEH) Exploit

This Metasploit module exploits a stack based buffer overflow in Publish-It when processing a specially crafted .PUI file. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing a user of Publish-It to open a malicious .PUI file. Thi...

CVE-2015-0980

SCADA Engine BACnet OPC Server (BACnet OPC Server) before version 2.1.371.24 is affected by CVE-2015-0980 via a format-string vulnerability in the SOAP web interface (BACnOPCServer.exe). Exploitation could allow remote attackers to execute arbitrary code. The ICS-CERT advisory notes a fixed versi...

Publish-It PUI Buffer Overflow (SEH)

This module exploits a stack based buffer overflow in Publish-It when processing a specially crafted .PUI file. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing a user of Publish-It to open a malicious .PUI file. This module...

Publish-It 3.6d - Local Buffer Overflow (SEH)

Publish-It 3.6d - Local Buffer Overflow SEH !/usr/bin/python Title: Publish-It 3.6d - Buffer Overflow SEH Exploit Date: 2/16/15 Vulnerability: Discovery and PoC by Core Security http://www.exploit-db.com/exploits/31461/ Exploit Author: jakx Andrew Smith of Sword & Shield Enterprise Security Vendo...

Publish-It 3.6d - Local Buffer Overflow (SEH)

!/usr/bin/python Title: Publish-It 3.6d - Buffer Overflow SEH Exploit Date: 2/16/15 Vulnerability: Discovery and PoC by Core Security http://www.exploit-db.com/exploits/31461/ Exploit Author: jakx Andrew Smith of Sword & Shield Enterprise Security Vendor Homepage: http://www.postersw.com/ Version...

CVE-2014-0980

CVE-2014-0980 : A stack-based buffer overflow in Poster Software PUBLISH-iT 3.6d arises while processing .PUI files due to insufficient validation of the length of entry names in a “styl” record. This leads to remote code execution when a user opens a crafted PUI file. Public material confirms th...

CORE-2014-0001 - Publish-It Buffer Overflow Vulnerability

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Publish-It Buffer Overflow Vulnerability 1. Advisory Information Title: Publish-It Buffer Overflow Vulnerability Advisory ID: CORE-2014-0001 Advisory URL:...

CVE-2014-0980

creationtimestamp| type| source ---|---|--- 2014-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31461 2014-02-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31524 2015-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36104 2015-03-19...

CVE-2012-0980

In phux Download Manager, CVE-2012-0980 describes an SQL injection vulnerability in download.php via the file parameter. The OpenVAS entry (phux Download Manager 'file' Parameter SQL Injection Vulnerability) confirms a classic SQLi risk allowing remote input to affect the database. The vulnerabil...

MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, they could leverage this issue to execute arbitrary code subject to the...

MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Office file, these issues could be leveraged to execute arbitrary code subject to the user's...

CVE-2011-0980

CVE-2011-0980 corresponds to a memory corruption flaw in Microsoft Office that arises when parsing Office Art objects, enabling remote code execution via a crafted file. It affects Excel/Office components across Windows and Mac builds listed in the initial document (Excel 2002/2003, Office for Ma...

CVE-2010-0980

The CVE-2010-0980 entry concerns Left 4 Dead (L4D) Stats 1.1. The vulnerability is a SQL injection in player.php that allows remote attackers to modify or exfiltrate data via the steamid parameter. This is supported by multiple sources (NVD entry and related references) which indicate arbitrary S...

CVE-2010-0980

creationtimestamp| type| source ---|---|--- 2010-01-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10930...

CVE-2009-0980

The CVE-2009-0980 entry concerns Oracle Database 10.2.0.3 and 11.1.0.6 with an unspecified vulnerability in the SQLX Functions component (related to AGGXQIMP). Affected software: Oracle Database 10.2.0.3 and 11.1.0.6, specifically the SQLX Functions. Root cause/details are not fully disclosed in ...

Gentoo Security Advisory GLSA 200411-20 (ez-ipupdate)

The remote host is missing updates announced in advisory GLSA 200411-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-20 (ez-ipupdate)

The remote host is missing updates announced in advisory GLSA 200411-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...