VUPEN Security Research - Apple Safari Scrollbar Handling Use-after-free Vulnerability (VUPEN-SR-2010-245)

VUPEN Security Research - Apple Safari Scrollbar Handling Use-after-free Vulnerability VUPEN-SR-2010-245 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used...

MP3-Nator Buffer Overflow SEH-DEP Bypass

Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: C4SS!0 G0M3S Software Link: http://www.brothersoft.com/d.php?softid=16524&url=http://files.brothersoft.com/mp3audio/players/mp3nator.zip...

MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)

MP3-Nator - Local Buffer Overflow SEH DEP Bypass Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: C4SS!0 G0M3S Software Link:...

Microsoft Internet Explorer 6/7/8 - Memory Corruption

Internet Explorer Memory Corruption 0day Vulnerability CVE-2010-3962 Tested on Windows XP SP3 IE6 IE7 IE8 Coded by Matteo Memelli ryujin at offsec.com http://www.offensive-security.com/0day/ie-0day.txt Thx to dookie at offsec.com notes : This is a quick and dirty exploit! No DEP/ASLR bypass here...

Adobe Flash Player "Button" Remote Code Execution

$Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Flash Player - 'Button' Arbitrary Code Execution (Metasploit)

$Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Flash Player "Button" Remote Code Execution

This module exploits a vulnerability in the handling of certain SWF movies within versions 9.x and 10.0 of Adobe Flash Player. Adobe Reader and Acrobat are also vulnerable, as are any other applications that may embed Flash player. Arbitrary code execution is achieved by embedding a specially...

Mozilla Confirms Critical Firefox Bug, Readies Fix

Mozilla is working on a patch for the recently disclosed critical bug in Firefox that has been exploited on at least one prominent Web site this week. The vulnerability in Firefox is being used by attackers in drive-by download attacks to install malware on victims’ machines. Mozilla’s security...

Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

Exploit for windows platform in category local exploits =================================================================== Winamp 5.5.8.2985 inmod plugin Stack Overflow Friendly Version =================================================================== !/usr/bin/python Winamp 5.5.8.2985 inmod...

Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D and 7eK presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow A Script Kiddie Friendly Production WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ An improvement to...

Immunity Canvas: JAVA_DOCBASE

Name| javadocbase ---|--- CVE| CVE-2010-3552 Exploit Pack| CANVAS Description| Java IE Plugin "docparam" Overflow Notes| CVE Name: CVE-2010-3552 Vendor: Oracle Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN under IE 8 updated. Windows XP Home SP3 EN...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ POC by fdisk Exploit by Mighty-D Special thanks to: fdisk: Who wrote the skeleton o...

Oracle Java 6 - OBJECT tag launchjnlpdocbase Remote Buffer Overflow

Oracle Java 6 - OBJECT tag launchjnlpdocbase Remote Buffer Overflow Source: http://code.google.com/p/skylined/issues/detail?id=23 SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS ,dSSSSSSSSSSSS SSSS ,dSSY' SSSS SSSS SSSS SSSS SSSSb, SS...

Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow

Source: http://code.google.com/p/skylined/issues/detail?id=23 SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS ,dSSSSSSSSSSSS SSSS ,dSSY' SSSS SSSS SSSS SSSS SSSSb, SSSS ,dSSSSSSSSSSSS SSSSSSSSSSSSb, SSSS SSSS ,dSSY' SSSS SSSS SSSS SSS...

SnackAmp 3.1.3B Malicious SMP Buffer Overflow (SEH - DEP BYPASS)

Exploit for windows platform in category local exploits ================================================================ SnackAmp 3.1.3B Malicious SMP Buffer Overflow SEH - DEP BYPASS ================================================================ Exploit Title: SnackAmp 3.1.3B Malicious SMP...

SnackAmp 3.1.3B - SMP Buffer Overflow (SEH) (DEP Bypass)

Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.3 Bet...

SnackAmp 3.1.3B SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.3 Bet...

SnackAmp 3.1.3B - SMP Buffer Overflow (SEH) (DEP Bypass)

SnackAmp 3.1.3B - SMP Buffer Overflow SEH DEP Bypass Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link:...

AudioTran 1.4.2.4 - SafeSEH + SEHOP

/ Exploit Title: AudioTran SafeSEH+SEHOP all-at-once attack method exploit Date: 2010.10.1 Author: x90c Version: 1.4.2.4 Tested on: - MS Win xp sp3 pro ko SafeSEH - MS Win xp sp3 pro en SafeSEH - MS Win Vista ultimate sp0 ko SafeSEH - MS Win Vista ultimate sp1 ko SafeSEH + SEHOP enabled CVE : / /...

Adobe Acrobat - Bundled LibTIFF Integer Overflow (Metasploit)

$Id: adobelibtiff.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...