NTR ActiveX Control Check() Method Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Android 4.0.4 multiple Zero-Day Vulnerabilities

The Samsung Galaxy S3 can be hacked via NFC, allowing attackers to download all data from the Android smartphone, security researchers demonstrated during the Mobile Pwn2Own contest in Amsterdam. Using a pair of zero day vulnerabilities, a team of security researchers from U.K.-based MWR Labs...

Microsoft Internet Explorer 6/7/8/9 contain a use-after-free vulnerability

Overview Microsoft Internet Explorer versions 6, 7, 8, and 9 are susceptible to a use-after-free vulnerability CWE-416 that may result in remote code execution. Description Microsoft Internet Explorer 6/7/8/9 contains a use-after-free vulnerability in the CMshtmlEd::Exec function. An attacker may...

Simple Web Server 2.2-rc2 Code Execution

use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: Dhruval [email protected] Tested on Windows 7 32bit NOTE : If exploit is not...

Simple Web Server 2.2-rc2 ASLR Bypass Exploit

Exploit for windows platform in category remote exploits use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: Dhruval email protected...

Simple Web Server 2.2-rc2 - ASLR Bypass

use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If exploit is not running properly configur...

Simple Web Server 2.2-rc2 - ASLR Bypass

Simple Web Server 2.2-rc2 - ASLR Bypass use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If...

Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)

Microsoft Internet Explorer - Time Element Memory Corruption MS11-050 Vuln Title: Internet Explorer Remote Code Execution Exploit DEP and ASLR Bypass Author: FaryadR a.k.a Ciph3r tested on : win 7 and IE 8 DEP and ASLR Twitter : https://twitter.com/faryadR Mail : [email protected] Website :...

Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)

Vuln Title: Internet Explorer Remote Code Execution Exploit DEP and ASLR Bypass Author: FaryadR a.k.a Ciph3r tested on : win 7 and IE 8 DEP and ASLR Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com Vendor : Microsoft Time Element Memory Corruption...

CoolPlayer+ Portable 2.19.2 Buffer Overflow ASLR Bypass (Large Shellcode)

Exploit for windows platform in category local exploits !/usr/bin/ruby Exploit for CoolPlayer+ Portable 2.19.2 Based on exploit by Blake and Dhruval. Vulnerability found by Securityxxxpert Original: http://www.exploit-db.com/exploits/20262/ This one by Robert Larsen Lots of room for shellcode as...

CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass)

!/usr/bin/ruby Exploit for CoolPlayer+ Portable 2.19.2 Based on exploit by Blake and Dhruval. Vulnerability found by Securityxxxpert Original: http://www.exploit-db.com/exploits/20262/ This one by Robert Larsen Lots of room for shellcode as opposed to original exploit. Shellcode created with:...

CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass)

CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow ASLR Bypass !/usr/bin/ruby Exploit for CoolPlayer+ Portable 2.19.2 Based on exploit by Blake and Dhruval. Vulnerability found by Securityxxxpert Original: http://www.exploit-db.com/exploits/20262/ This one by Robert Larsen Lots of room for...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2)

CoolPlayer Portable 2.19.2 - Local Buffer Overflow ASLR Bypass 2 Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake patched by pole Originally found by Securityxxxpert print...

CoolPlayer Portable 2.19.2 Buffer Overflow ASLR bypass

Exploit for windows platform in category local exploits Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake patched by Dhruvalemail protected Originally found by Securityxxxpert print...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2)

Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake patched by pole Originally found by Securityxxxpert print "\n=====================================" print "CoolPlayer Portable Buffer...

Linux x86 - ASLR deactivation 83 bytes

Linux x86 - ASLR deactivation 83 bytes. Shellcode exploit for linx86 platform / Title: Linux x86 ASLR deactivation - 83 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 70 61 63 65 push...

eGlibc - Signedness Code Execution

Exploit Title: eGlibc Signedness Vulnerability Date: November 2011 Exploit Author: c0ntex Vendor Homepage: http://www.eglibc.org Software Link: http://www.eglibc.org/home Version: eGlibc supplied by Ubuntu 10.4 LTS Tested on: Ubuntu 10.4 LTS CVE : CVE-2011-2702 A delicious, yet slightly cold...

eGlibc - Signedness Code Execution

eGlibc - Signedness Code Execution Exploit Title: eGlibc Signedness Vulnerability Date: November 2011 Exploit Author: c0ntex Vendor Homepage: http://www.eglibc.org Software Link: http://www.eglibc.org/home Version: eGlibc supplied by Ubuntu 10.4 LTS Tested on: Ubuntu 10.4 LTS CVE : CVE-2011-2702 ...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated packages fix the following security issues : - the exitnotify function in the Linux kernel did not properly reset the exit signal if a process executed a set user ID setuid application before exiting. This could allow a local, unprivileged user to elevate their privileges...

CentOS Update for kernel CESA-2011:0833 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...