Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow

Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow !/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability...

Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================= Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit ================================================================= !/usr/bin/python FireFox 2.0.0.16 Windows ...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

Immunity Canvas: SMB2_NEGOTIATE_REMOTE

Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: IISFTP_NLST

Name| iisftpnlst ---|--- CVE| CVE-2009-3023 Exploit Pack| CANVAS Description| IISFTPNLST Notes| CVE Name: CVE-2009-3023 VENDOR: Microsoft References: http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070467.html CVE Url: https://vulners.com/cve/CVE-2009-3023 Date public: 08/31/09 CVS...

Immunity Canvas: PROTO_OPS_NULL

Name| protoopsnull ---|--- CVE| CVE-2009-2692 / CVE-2009-2698 Exploit Pack| CANVAS Description| protoopsnull / udpsendmsg Notes| References: 'http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html' Date public: VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2009-2692 CVE Name:...

Immunity Canvas: FIREFOX_35

Name| firefox35 ---|--- CVE| CVE-2009-2477 Exploit Pack| CANVAS Description| Firefox 3.5 Remote Code Execution Notes| CVE Name: CVE-2009-2477 VENDOR: Mozilla Notes: Although the advisories states that this due to improper handling of and tags, this exploit uses another method to reach the...

Immunity Canvas: FCKEDITOR

Name| FCKEditor ---|--- CVE| CVE-2009-2265 Exploit Pack| CANVAS Description| FCKEditor Notes| CVE Name: CVE-2009-2265 VENDOR: Known Vunlerable Versions: 'ColdFusion MX 8 - 8.01', 'osCMax =2.0', 'RunCMS =1.3a', 'Falt4 CMS', 'Many more to come!' Notes: This exploit has two different variants - one...

Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

Immunity Canvas: ZENCART_REMOTE

Name| zencartremote ---|--- CVE| CVE-2009-2255 Exploit Pack| CANVAS Description| zencartremote Notes| Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2255 VENDOR: www.zen-cart.com/ CVSS: 6.8 CVE Name: CVE-2009-2255...

CVE-2009-2175

Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the 1 xcf2pnm and 2 xcf2png utilities, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image that causes a conversion to ...

Stack overflow

Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the 1 xcf2pnm and 2 xcf2png utilities, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image that causes a conversion to ...

Immunity Canvas: SUGARCRM_FILEUPLOAD

Name| sugarcrmfileupload ---|--- CVE| CVE-2009-2146 Exploit Pack| CANVAS Description| sugarcrmfileupload Notes| CVE Name: CVE-2009-2146 VENDOR: http://www.sugarcrm.com Notes: Tested on SugarCRM 5.2.0c. This exploits needs a valid username and password for SugarCRM to exploit as the vulnerability...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...

Cross site scripting

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...

CVE-2009-1694

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site...

CVE-2009-1694

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site...

CVE-2009-1694

CVE-2009-1694 affects WebKit in Apple Safari

CVE-2009-1693

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...

Immunity Canvas: DOKUWIKI_EXEC2

Name| dokuwikiexec2 ---|--- CVE| CVE-2009-1960 Exploit Pack| CANVAS Description| DokuWiki 2009-02-14 Globals overwrite / Code execeution Notes| References: 'www.securityfocus.com/bid/35095' CVE Name: CVE-2009-1960 Repeatability: Infinite CVE Url:...