Delphi and C++ Builder VCL library Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Buffer Overflow Advisory ID: CORE-2014-0004 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-buffer-overflow Date published: 2014-08-20 Date of last update: 2014-08-20 Vendors contacted...

IrcDelphi Daemon Server Denial of Service

No description provided by source. DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly...

Google Chrome 34.0.1847.131 DLL Hijacking

google chrom latest Version 34.0.1847.131 m 32-bit DLL Order Hijacking Exploit Title: google chrom Version 34.0.1847.131 m 32-bit DLL Order Hijacking Date: 2014/04/25 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage:...

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking Exploit Title: KmPlayer 3.8.0.123 DLL Hijacking Date: 2014/04/22 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.kmplayer.com/ Software Link:...

Trojan.Ferret DDoS Botnet Discovered

Researchers at Arbor Networks have identified a new DDoS bot with a fancy for ferrets. Following a clue in a tweet, researcher Dennis Schwarz found Trojan.Ferret, including a command and control panel with some insight into targets. To date, a relatively small number of malware samples and comman...

Obamacare Website Denial-of-Dervice Tool Discovered

Arbor Networks’ Security Engineering and Response Team ASERT has discovered a denial-of-service tool specifically designed to target the U.S. government’s healthcare enrollment marketplace, Healthcare.gov. Healthcare.gov is established by the Affordable Care Act ACA in the United States, perhaps...

Narilam malware target Iran Financial SQL Databases

Symantec recently identified a database-corrupting piece of malware targeting systems mostly in Iran, but despite early speculation that it could be related to the likes of Stuxnet and Flame, it appears to be targeting small businesses rather than the country's infrastructure. Malware Dubbed...

Optima DDOS 10a Botnet leaked on Underground Forums

Optima DDOS 10a botnet leaked on Underground Forums On underground forums "Optima DDOS 10a Botnet " full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and...

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable DarkComet-RAT v4.0 Change log - DarkComet-RAT is now compiled on Delphi XE instead of Delphi 2010. - Synthax highlighter added in remote keylogger. - Multithreading is now more efficient, no more freezing, using a new powerfull and stable...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

BarCodeWiz ActiveX LoadProperties Buffer Overflow

Added: 05/23/2011 CVE: CVE-2010-2932 BID: 42097 OSVDB: 66882 Background BarCodeWiz Barcode ActiveX Control is a tool for generating barcodes in Microsoft Office documents, and for Visual Basic, Visual C++, VB.NET, C, or Delphi developer looking to include barcodes in programs. Problem The...

Prevx Registry value “KCSI” Exploit

Exploit for windows platform in category local exploits =================================== Prevx Registry value “KCSI” Exploit =================================== Prevx, trying to read the data contained in the registry value”\PCSI\KCSI”, and eventually make it null if it contains data...

Borland Delphi Professionnel v 5.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== Borland Delphi Professionnel v 5.0 DLL Hijacking Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Embarcadero Delphi XE (2011) DLL preloading exploit

Exploit for windows platform in category local exploits =================================================== Embarcadero Delphi XE 2011 DLL preloading exploit =================================================== Exploit Title : Embarcadero Delphi XE 2011, DLL preloading exploit Author : STRELiTZIA...

Internet Download Manager module (idmmkb.dll) Tonec Inc

Exploit for windows platform in category local exploits ======================================================= Internet Download Manager module idmmkb.dll Tonec Inc ======================================================= Exploit Title: Dll Hijacking Exploit Application: Internet Download Manager...

IrcDelphi Daemon Server - Denial of Service

IrcDelphi Daemon Server - Denial of Service DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK...

IrcDelphi Daemon Server - Denial of Service

DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly leading to a Denial-of-Service flaw...

IrcDelphi Denial Of Service

DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly leading to a Denial-of-Service flaw...

Borland Delphi 7 Crash

Exploit for windows platform in category dos / poc ====================== Borland Delphi 7 Crash ====================== Title : Borland Delphi 7 Crash Date : 27 Sept 2010 Author : STRELiTZIA Software : Delphi 7 Tested on : Windows Xp SP3 ============================ = Description =...

Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net

Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...