Prolink H5004NK Cross Site Request Forgery Vulnerability

PROLiNK H5004NK suffers from multiple cross site request forgery vulnerabilities. Exploit Title: PROLiNK H5004NK Multiple Vulnerabilities Date: 16-04-2015 Firmware: R76S Slt 4WNE1 6.1R Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Disclaimer: Use this for...

Immunity Canvas: ROOTPIPE

Name| rootpipe ---|--- CVE| CVE-2015-1130 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe local privilege escalation Notes| CVE Name: CVE-2015-1130 VENDOR: Apple Notes: This is a local privilege escalation affecting all Mac OS X versions from 10.7 up to 10.10.2. We provide bot...

Offset2lib - Bypassing Full ASLR On 64 bit Linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2014-1204-1 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title:...

Offset2lib - Bypassing Full ASLR On 64 bit Linux

Offset2lib - Bypassing Full ASLR On 64 bit Linux -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2014-1204-1 | | http://packetstormsecurity.com/ |...

Free WMA MP3 Converter 1.8 (.wav) - Buffer Overflow

No description provided by source. !/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def...

i-FTP Buffer Overflow SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:i-FTP Buffer Overflow SEH Homepage:http://www.memecode.com/iftp.php Software Link:www.memecode.com/data/iftp-win32-v220.exe Version:i.Ftp v2.20 Win32 Release Vulnerability discovered:26.10.2014 Description:Simp...

Free WMA MP3 Converter 1.8 - .wav Local Buffer Overflow

Free WMA MP3 Converter 1.8 - .wav Local Buffer Overflow !/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import...

Free WMA MP3 Converter 1.8 - '.wav' Local Buffer Overflow

!/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def littleendianaddress: return...

Free WMA MP3 Converter 1.8 SEH Buffer Overflow Exploit

Free WMA MP3 Converter version 1.8 SEH buffer overflow exploit. !/usr/bin/env python Free WMA MP3 Converter 1.8 SEH Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:23.10.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64b...

[oss-security] LMS-2014-07-07-1: python-lz4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, Please find the bug report for python-lz4 attached below. Steeve Morin @steeve, the maintainer of the python-lz4 package, has been great to work with. He worked quickly to get the package up to date by this morning. Thanks, Don A. Bailey...

PHP 5.4.0RC6 64bit Denial of Service

No description provided by source. ?php / This script generates a POST header that makes PHP 5.4.0RC6 64 bit try to execute code at 0x1111111111111111 C Copyright 2012 Stefan Esser PHP 5.3.9 requires you to know the address of a writable address filled with NULL. 32bit requires you to create a fa...

Attachmate Reflection Standard Suite 2008 activex buffer overflow

No description provided by source. Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested on: WinXP SP3 & Win7 64bit CVE : None...

Oreans Themida 2.1.8.0 - TMD File Handling Buffer Overflow Vulnerability

No description provided by source. / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software develope...

Audacious Player 3.4.2/3.4.1 - (.mp3) Crash PoC

No description provided by source. Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1:...

openSUSE Security Update : ruby (openSUSE-SU-2011:0556-1)

A memory corruption in the BigDecimal class potentially allowed attackers to execute arbitrary code CVE-2011-0188. Affects 64bit platforms only. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Immunity Canvas: LINUX_FUTEX_REQUEUE

Name| linuxfutexrequeue ---|--- CVE| CVE-2014-3153 Exploit Pack| CANVAS Description| Futex Requeue Privilege Escalation Exploit Notes| Repeatability: Multiple times Notes: - Supported 64bit kernels: 3.11.0-13-22-generic - Ubuntu saucy 13.10 3.11.0-13-22-generic - Ubuntu precise 12.04...

Write a ring3 program compromised Duba hard disk protection-vulnerability warning-the black bar safety net

Write a ring3 program compromised Duba hard disk protection The test system environment: win7 64bit Use in Kingsoft offers online latest download new virus Blaster（Goku） Run a detailed description of the program, you can break the hard drive protection, Another bonus function: direct delete...

Solaris 10 (sparc) : 137204-38 (deprecated)

Messaging Server 64bit 7.0.5.38.0: core patch. Date this patch was last updated by Sun : Dec/10/16 This plugin has been deprecated and either replaced with individual 137204 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Audacious Player 3.4.2 / 3.4.1 Denial Of Service

Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1: http://www.softpedia.com/dyn-postdownload.php?p=208954&t=0&i=1 Version:...

Linux Kernel MSR Driver Privilege Escalation

// PoC exploit for /dev/cpu//msr, 32bit userland on a 64bit host // can do whatever in the commented area, re-enable module support, etc // requires CONFIGX86MSR and just uid 0 // a small race exists between the time when the MSR is written to the first // time and when we issue our sysenter // w...