Prolink H5004NK Cross Site Request Forgery Vulnerability

PROLiNK H5004NK suffers from multiple cross site request forgery vulnerabilities. Exploit Title: PROLiNK H5004NK Multiple Vulnerabilities Date: 16-04-2015 Firmware: R76S Slt 4WNE1 6.1R Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Disclaimer: Use this for...

Immunity Canvas: ROOTPIPE

Name| rootpipe ---|--- CVE| CVE-2015-1130 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe local privilege escalation Notes| CVE Name: CVE-2015-1130 VENDOR: Apple Notes: This is a local privilege escalation affecting all Mac OS X versions from 10.7 up to 10.10.2. We provide bot...

Offset2lib - Bypassing Full ASLR On 64 bit Linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2014-1204-1 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title:...

Offset2lib - Bypassing Full ASLR On 64 bit Linux

Offset2lib - Bypassing Full ASLR On 64 bit Linux -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2014-1204-1 | | http://packetstormsecurity.com/ |...

Free WMA MP3 Converter 1.8 (.wav) - Buffer Overflow

No description provided by source. !/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def...

i-FTP Buffer Overflow SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:i-FTP Buffer Overflow SEH Homepage:http://www.memecode.com/iftp.php Software Link:www.memecode.com/data/iftp-win32-v220.exe Version:i.Ftp v2.20 Win32 Release Vulnerability discovered:26.10.2014 Description:Simp...

Free WMA MP3 Converter 1.8 - .wav Local Buffer Overflow

Free WMA MP3 Converter 1.8 - .wav Local Buffer Overflow !/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import...

Free WMA MP3 Converter 1.8 - '.wav' Local Buffer Overflow

!/usr/bin/env python Free WMA MP3 Converter 1.8 Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:10.23.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64bit import struct def littleendianaddress: return...

Free WMA MP3 Converter 1.8 SEH Buffer Overflow Exploit

Free WMA MP3 Converter version 1.8 SEH buffer overflow exploit. !/usr/bin/env python Free WMA MP3 Converter 1.8 SEH Buffer Overflow Version:1.8 Build 20140226 Author:metacom Date:23.10.2014 Download:http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on:Win7-En 32bit - Win8.1-DE 64b...

[oss-security] LMS-2014-07-07-1: python-lz4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, Please find the bug report for python-lz4 attached below. Steeve Morin @steeve, the maintainer of the python-lz4 package, has been great to work with. He worked quickly to get the package up to date by this morning. Thanks, Don A. Bailey...

Oreans Themida 2.1.8.0 - TMD File Handling Buffer Overflow Vulnerability

No description provided by source. / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software develope...

PHP 5.4.0RC6 64bit Denial of Service

No description provided by source. ?php / This script generates a POST header that makes PHP 5.4.0RC6 64 bit try to execute code at 0x1111111111111111 C Copyright 2012 Stefan Esser PHP 5.3.9 requires you to know the address of a writable address filled with NULL. 32bit requires you to create a fa...

Attachmate Reflection Standard Suite 2008 activex buffer overflow

No description provided by source. Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested on: WinXP SP3 & Win7 64bit CVE : None...

Audacious Player 3.4.2/3.4.1 - (.mp3) Crash PoC

No description provided by source. Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1:...

openSUSE Security Update : ruby (openSUSE-SU-2011:0556-1)

A memory corruption in the BigDecimal class potentially allowed attackers to execute arbitrary code CVE-2011-0188. Affects 64bit platforms only. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Immunity Canvas: LINUX_FUTEX_REQUEUE

Name| linuxfutexrequeue ---|--- CVE| CVE-2014-3153 Exploit Pack| CANVAS Description| Futex Requeue Privilege Escalation Exploit Notes| Repeatability: Multiple times Notes: - Supported 64bit kernels: 3.11.0-13-22-generic - Ubuntu saucy 13.10 3.11.0-13-22-generic - Ubuntu precise 12.04...

Write a ring3 program compromised Duba hard disk protection-vulnerability warning-the black bar safety net

Write a ring3 program compromised Duba hard disk protection The test system environment: win7 64bit Use in Kingsoft offers online latest download new virus Blaster（Goku） Run a detailed description of the program, you can break the hard drive protection, Another bonus function: direct delete...

Solaris 10 (sparc) : 137204-38 (deprecated)

Messaging Server 64bit 7.0.5.38.0: core patch. Date this patch was last updated by Sun : Dec/10/16 This plugin has been deprecated and either replaced with individual 137204 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Audacious Player 3.4.2 / 3.4.1 Denial Of Service

Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1: http://www.softpedia.com/dyn-postdownload.php?p=208954&t=0&i=1 Version:...

Linux Kernel MSR Driver Privilege Escalation

// PoC exploit for /dev/cpu//msr, 32bit userland on a 64bit host // can do whatever in the commented area, re-enable module support, etc // requires CONFIGX86MSR and just uid 0 // a small race exists between the time when the MSR is written to the first // time and when we issue our sysenter // w...