Warning! Think Twice Before Using USB Drives

Security researchers have discovered a new data-stealing Trojan that makes special use of USB devices in order to spread itself and does not leave any trace of activity on the compromised systems. Dubbed USB Thief or Win32/PSW.Stealer.NAI, the malware has the capability of stealthy attacking...

Exploit for CVE-2017-8464

CVE-2017-8464 EXPAMP...

CVE-2015-4173: Unquoted Search Path or Element

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

PT-2015-6444

Name of the Vulnerable Software and Affected Versions Dell SonicWall NetExtender versions prior to 7.5.227 Dell SonicWall NetExtender versions 8.0.x prior to 8.0.238 SRA firmware versions prior to 7.5.1.2-40sv SRA firmware versions 8.x prior to 8.0.0.3-23sv Description The issue allows local user...

Microsoft Windows 95/98/NT 4.0 autorun.inf Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/993/info The Windows Autorun feature was designed to allow an executable and an icon to be specified for any piece of removable media. Upon insertion, the icon would be displayed for the drive, and the executable would...

GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...

CPE17 Autorun Killer <= 1.7.1 Stack Buffer Overflow Exploit

No description provided by source. CPE17 Autorun Killer = 1.7.1 Stack Buffer Overflow exploit by Xelenonz require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::FILEFORMAT def initializeinfo = superupdateinfoinfo, 'Name' = 'CPE17 Autorun Killer = 1.7.1 Stack Buffer Overfl...

USB Malware Targeting Siemens Control Software (Update C)

Overview VirusBlokAda, an antivirus vendor based in Belarus, announcedVirusBlokAda, http://www.anti-virus.by/en/tempo.shtml, website last visited July 15, 2010. the discovery of malware that uses a zero-day vulnerability in Microsoft Windows processing of shortcut files. The malware utilizes this...

Persistent Payload In Windows Volume Shadow Copy

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/exploit/exe' class...

Shylock/Caphaw Banking Malware Infections on the Rise

Two dozen major U.S. and European banks are in the crosshairs of the Shylock, or Caphaw, financial malware of late, and victims who trade with one of the 24 financial institutions are at risk of giving up their credentials and losing assets in their accounts. Malware researchers have noticed a ri...

Android based hacking tool to steal passwords from connected computers

A recently discovered new form of Android malware called USB Cleaver can not only infect your smartphone, but also targets your PC to steal sensitive information from it. A hacking tool discovered by analysts at F-Secure, which is capable of stealing information from a connected Windows machine...

New Autorun Malware Spiking

Autorun malware used to be kind of a big deal around here. Worms that jump directly from removable media such as USB drives as soon as they are connected to a PC can cause some major trouble, spreading quickly through a network. Microsoft made a change to newer versions of Windows that disables t...

Researchers Uncover Polymorphic AutoRun Worm

W32/Autorun.worm.aaeb-h is an evolved, virtual machine-aware AutoRun worm that makes use of obfuscation and polymorphic techniques in order to evade detection and infect removable media and mounted network shares, according to McAfee. Researchers have seen an increase in samples for the year-old...

Worm Tries AutoRun, Then Social Engineering to Infect

Sophos and TrendMicro, and anumber of other security firms, are reporting a dramatic increase in the prevalence of a worm using AutoRun and social engineering to proliferate. If you thought Microsoft solved the AutoRun problem, you aren’t alone. They tried to shut it down after it was famously an...

CPE17 Autorun Killer ASCII Buffer Overflow

Exploit Title: CPE17 Autorun Killer - ASCII Buffer Overflow Exploit Date: 01/10/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ Software Link: http://download.thaiware.com/program15/cpe17antiautorun1590.rar Version: v.1.8.6 Build 1590 Tested on: Windows XP SP3...

Buffer overflow

Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file...

CVE-2012-4054

CVE-2012-4054 affects CPE17 Autorun Killer 1.7.1 and earlier. The vulnerability is a buffer overflow in the readfile function that enables arbitrary code execution by a crafted inf file, with a Local attack vector and no authentication required per the CVSS data. Impact is listed as complete conf...

CVE-2012-4054

Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file...

CVE-2012-4054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers to execute arbitrary code via a crafted inf file...

PT-2012-5172

Name of the Vulnerable Software and Affected Versions CPE17 Autorun Killer versions 1.7.1 and earlier Description A buffer overflow issue exists in the readfile function, allowing physically proximate attackers to execute arbitrary code via a crafted inf file. Recommendations For versions 1.7.1 a...