CVE-2015-8579: Undefined Security Weakness

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577: Undefined Security Weakness

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

PT-2015-3025

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 6 Description The issue is related to the Buffer Overflow Protection BOP feature, which allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit...

Adobe Flash JIT Spray ASLR/DEP Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Adobe Flash Player...

Easy File Sharing Web Server 7.2 - Remote SEH Buffer Overflow (DEP Bypass with ROP)

Easy File Sharing Web Server version 7.2 remote SEH buffer overflow exploit using DEP bypass with ROP. !/usr/bin/env python Exploit title: Easy File Sharing Web Server v7.2 - Remote SEH Buffer Overflow DEP bypass with ROP Date: 29/11/2015 Exploit Author: Knaps Contact: @TheKnapsy Website:...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/env python Exploit title: Easy File Sharing Web Server v7.2 - Remote SEH Buffer Overflow DEP bypass with ROP Date: 29/11/2015 Exploit Author: Knaps Contact: @TheKnapsy Website: http://blog.knapsy.com Software Link: http://www.sharing-file.com/efssetup.exe Version: Easy File Sharing Web...

Easy File Sharing Web Server 7.2 - Remote Buffer Overflow (SEH) (DEP Bypass + ROP)

!/usr/bin/env python Exploit title: Easy File Sharing Web Server v7.2 - Remote SEH Buffer Overflow DEP bypass with ROP Date: 29/11/2015 Exploit Author: Knaps Contact: @TheKnapsy Website: http://blog.knapsy.com Software Link: http://www.sharing-file.com/efssetup.exe Version: Easy File Sharing Web...

Latest EMET Bypass Targets WoW64 Windows Subsystem

Backwards compatibility, a necessary evil for Microsoft in its need to support so many legacy applications on Windows, may be its undoing as researchers have found a way to exploit this layer in the operating system to bypass existing mitigations against memory-based exploits. Specifically in thi...

Alreader 2.5 .fb2 - Based Stack Overflow (SEH) (ASLR + DEP Bypass)

Alreader 2.5 .fb2 - Based Stack Overflow SEH ASLR + DEP Bypass !/usr/bin/env python Exploit Title: Alreader 2.5 .fb2 SEH Based Stack Overflow ASLR and DEP bypass Date: 25.10.2015 Category: Local Exploit Exploit Author: g00dv1n Contact: [email protected] Version: 2.5 Tested on: Windows XP...

Alreader 2.5 .fb2 - SEH Based Stack Overflow (ASLR and DEP bypass) Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: Alreader 2.5 .fb2 SEH Based Stack Overflow ASLR and DEP bypass Date: 25.10.2015 Category: Local Exploit Exploit Author: g00dv1n Contact: email protected Version: 2.5 Tested on: Windows XP SP3 / Windows 7 /...

Alreader 2.5 .fb2 - Based Stack Overflow (SEH) (ASLR + DEP Bypass)

!/usr/bin/env python Exploit Title: Alreader 2.5 .fb2 SEH Based Stack Overflow ASLR and DEP bypass Date: 25.10.2015 Category: Local Exploit Exploit Author: g00dv1n Contact: [email protected] Version: 2.5 Tested on: Windows XP SP3 / Windows 7 / Windows 8 Vendor Homepage:...

PT-2015-2913

Name of the Vulnerable Software and Affected Versions Kaspersky Total Security version 15.0.2.361 Kaspersky Total Security affected versions not specified Description The issue is related to the allocation of memory with Read, Write, Execute RWX permissions at predictable addresses when protectin...

MS SQL Server 20002005 - SQLNS.SQLNamespace COM Object Refresh() Unhandled Pointer

MS SQL Server 20002005 - SQLNS.SQLNamespace COM Object Refresh Unhandled Pointer % Function PaddingintLen Dim strRet, intSize intSize = intLen/2 - 1 For I = 0 To intSize Step 1 strRet = strRet & unescape"%u4141" Next Padding = strRet End Function Function PackDWORDstrPoint strTmp = replacestrPoin...

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link:...

Foxit Reader - PNG Conversion Parsing tEXt Chunk Arbitrary Code Execution Exploit

Foxit Reader versions 7.0.8 through 7.1.5 suffer from a PNG conversion parsing tEXt chunk arbitrary code execution vulnerability. Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage:...

Foxit Reader 7.1.5 Arbitrary Code Execution

Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link: https://www.foxitsoftware.com/downloads/ Version: 7.0.8 - 7.1.5 maybe also older versions tested...

Foxit Reader - '.png' Conversion Parsing tEXt Chunk Arbitrary Code Execution

Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link: https://www.foxitsoftware.com/downloads/ Version: 7.0.8 - 7.1.5 maybe also older versions tested...

McAfee SiteAdvisor 3.7.2 - Firefox Use-After-Free (PoC)

McAfee SiteAdvisor 3.7.2 - Firefox Use-After-Free PoC McAfee SiteAdvisor 3.7.2 for firefox Use After Free Poc / Title: McAfee SiteAdvisor 3.7.2 firefox Use After Free Author: Marcin Ressel Twitter: https://twitter.com/mressel NPMcFFPlg32.dll McAfee SiteAdvisor 3.7.2 Tested on: Windows 8.1 x64 and...

on windows systems use the VS compiler to buffer overflow preventive measures-vulnerability warning-the black bar safety net

0x01 /GS --buffer security check If you use the/GS compile the program to insert code to detect possible overwrite the function return address of buffer overflows. If the occurrence of a buffer overflow, the system will display to the user a warning dialog, and then terminate the program. Thus, t...

BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)

BulletProof FTP Client 2010 - Local Buffer Overflow DEP Bypass ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Feb 15 2015 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version...