CVE-2011-2829

Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays...

CVE-2011-2829: Integer Overflow or Wraparound

Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays...

PT-2011-4128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.215 Description The issue is related to an integer overflow that can be triggered on 32-bit platforms, potentially leading to a denial of service or other unspecified impacts. This is achieved through...

Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...

CVE-2011-2695: Off-by-one Error

Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service BUGON and system crash by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsign...

Fedora 15 : libxml-1.8.17-27.fc15 (2011-7820)

This update addresses CVE-2011-1944 heap-based buffer overflow by adding a new namespace node to an existing nodeset or merging nodesets. It is described in detail at http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-an d-interesting.html It also fixes the broken xpath...

Fedora 14 : libxml-1.8.17-27.fc14 (2011-7856)

This update addresses CVE-2011-1944 heap-based buffer overflow by adding a new namespace node to an existing nodeset or merging nodesets. It is described in detail at http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-an d-interesting.html It also fixes the broken xpath...

IBM Tivoli Directory Server SASL Bind Request Buffer Overflow (uncredentialed check)

Binary data tivolidirectorysrvbufferoverflow.nbin...

BackTrack 5 Release in 5 days, on 10th May !

BackTrack 5 Release in 5 days, on 10th May ! For all those who haven't heard, BackTrack 5 will be released in 5 days. So far, BT are on schedule and the whole team is excited by the release. The 10th will be a hectic day for us, so BT thought BT'd start putting out some information about BackTrac...

win32/xp sp3 Force Kill explorer.exe process Shellcode 73 Bytes

Exploit Title: win32/xp sp3 Force Kill explorer.exe process Shellcode 73 Bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

win32/xp sp3 StarWars Movie Shellcode 74 bytes

Exploit Title: win32/xp sp3 StarWars Movie Shellcode 74 bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

win32/xp sp3 cmd.exe Shellcode 50 bytes

Exploit Title: win32/xp sp3 cmd.exe Shellcode 50 bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

win32/xp sp3 Activate Guest Account Shellcode 67 Bytes

Exploit Title: win32/xp sp3 Activate Guest Account Shellcode 67 Bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

win32/xp sp3 MSPaint Shellcode 52 Bytes

Exploit Title: win32/xp sp3 MSPaint Shellcode 52 Bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Mandriva 2011 Beta 2 is Available for Testing !

Mandriva 2011 Beta 2 is Available for Testing ! Mandriva 2011 beta 2 was supposed to be released a week ago, but the release schedule was delayed by last minute defects discovered by the development and testing teams. In order to get hold of beta 2, you can visit your favorite Mandriva mirror and...

Windows 32 bit/xp-Sp3 MessageBox ShellCode 73 Bytes

+Exploit Title: Windows 32 bit/xp-Sp3 MessageBox ShellCode 73 Bytes +Author : ^Xecuti0N3r +Tested On : WIN32-XP Sp3 + Date : 20.04.2011 + Hour : 13:37 + Proof : http://k.min.us/jkMNiM.jpg include include include char code = "\x68\x6e\x33\x72\x00\x68\x75\x74" "\x69\x30\x68\x5e\x58\x65\x63\x89"...

Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow

Exploit for windows platform in category remote exploits $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informatio...

BackTrack 5 "revolution" will Release on May 10th, 2011

BackTrack 5 "revolution" will Release on May 10th, 2011 As BackTrack 5 development rolls on full steam ahead, we've been getting numerous questions about the future release. We thought we'd publish a blog post with general information about BT5 for the impatient. The codename of this release will...

CVE-2011-1138: Undefined Security Weakness

Off-by-one error in the dissect6lowpaniphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service application crash via a malformed 6LoWPAN IPv6 packet...

Wireshark 6LoWPAN denial of service vulnerability

Overview Wireshark will crash on 32-bit systems while reading a malformed 6LoWPAN packet. Description Paul Makowski's report states:dissect6lowpaniphcin /epan/dissectors/packet-6lowpan.c trusts user supplied data when incrementing 'offset '. It is possible for the user to increment 'offset ' to a...