[Full-disclosure] Some 0day Pocs

Mati Aharoni muts .@. offensive-security.com mailto:[email protected] http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...

Microsoft Windows - '.hlp' Local HEAP Overflow (PoC)

MS Windows .HLP File Local HEAP Overflow PoC 0day https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3693.hlp.tgz 04092007-evil1.hlp.tgz milw0rm.com 2007-04-09...

WebSPELL <= 4.01.02 (picture.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== WebSPELL = 4.01.02 picture.php File Disclosure Vulnerability =============================================================== WebSPELL = 4.01.02 picture.php Remote File...

MS Windows Animated Cursor (.ANI) Universal Exploit Generator

Exploit for unknown platform in category remote exploits ============================================================= MS Windows Animated Cursor .ANI Universal Exploit Generator =============================================================...

More information on ZERT patch for ANI 0day

Hi, more information about the patch released April 1st can be found here: http://zert.isotf.org/ Including: 1. Technical information. 2. Why this patch was released when eeye already released a third party patch. The newly discovered zero-day vulnerability in the parsing of animated cursors is...

PHP-Fusion Module Arcade 1.0 (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== PHP-Fusion Module Arcade 1.0 cid Remote SQL Injection Vulnerability ===================================================================== -------------------------------...

MS Windows Animated Cursor (.ANI) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== MS Windows Animated Cursor .ANI Local Buffer Overflow Exploit =============================================================== / MS Windows .ANI File Local Buffer Overflow Credit...

MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit

No description provided by source. ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and U...

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...

Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow

..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate...

2 0 0 7 the latest IE 0day net horse picture that-the vulnerability warning-the black bar safety net

Ghost boy Note: This something has recently fried very hot, the css calls the two pictures, but it is unclear principle. Reportedly originally sold to 8W, but now it seems like everywhere got. Just in xiaoguang there to see, turn around, and his this added a simple encryption. Source: XG'Blog How...

Linux Kernel <= 2.6.20 with DCCP Support Memory Disclosure Exploit v2

Exploit for linux platform in category local exploits ===================================================================== Linux Kernel include include include include include include define BUFSIZE 0x10000000 int mainint argc, char argv void mem = mmap0, BUFSIZE, PROTREAD | PROTWRITE,...

ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== ClassWeb 2.0.3 BASE Remote File Inclusion Vulnerabilities =========================================================== ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script:...

iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== iFrame for Phpnuke iframe.php Remote File Inclusion Vulnerability =================================================================== iFRAME for PhpNuke iframe.php Remote...

The real XSS 0DAY-vulnerability warning-the black bar safety net

Original: Summary: Internet Explorerhereinafter IE で WA "expression " と い u described in WO containing circular RU Ko と で, su Tatari イ Hikaru silicone ー Suites within the Ni JavaScript WO description su RU Ko と GA で Ki mA desu。 と Ko ro GA, the IE で WA, Ko の expression と い u language の Ken out of...

WBBlog (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ WBBlog XSS/SQL Multiple Remote Vulnerabilities ================================================ ======================x=o=r=o=n===================== WBBlog XSS/SQL Multiple Remote...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== McGallery 0.5b download.php Arbitrary File Download Vulnerability =================================================================== Piker McGallery 0.5b Arbitrary File...

Zomplog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)

Exploit for unknown platform in category web applications ========================================================== Zomplog = 3.7.6 Local File Inclusion Vulnerabilty win32 ========================================================== Made by Bl0od3r use IO::Socket; use Switch; $port = "80"; $target...

WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability ==================================================================== \ /\ \ / | \ \ | / \ // / | \ | \...

WordPress AdminPanel CSRF/XSS - 0day

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +---------------------------------------------------------------------------+ SaMuschie Research Labs proudly presents . . . | +---------------------------------------------------------------------------+ Application...