Rowhammer - NaCl Sandbox Escape

Sources: http://googleprojectzero.blogspot.ca/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://code.google.com/p/google-security-research/issues/detail?id=284 Full PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36311.tar.gz This is a proof-of-conce...

Ammyy Admin 3.5 - RCE

No description provided by source. Mirror: http://www.exploit-db.com/sploits/aa0day.zip The Revenge of the Scammers This exploit is an 0day in Ammyy Admin http://www.ammyy.com/en/ a remote desktop type software that is well known for being the software that many fake tech support phone scammers...

Ammyy Admin 3.5 - Remote Code Execution (Metasploit)

Ammyy Admin 3.5 - Remote Code Execution Metasploit Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34647.zip aa0day.zip The Revenge of the Scammers This exploit is an 0day in Ammyy Admin http://www.ammyy.com/en/ a remote desktop type software that is wel...

Minishare 1.4.1 - Buffer Overflow

No description provided by source. $Id: minisharegetoverflow.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit (poptop-sane.c)

No description provided by source. / Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained...

Exploit for Out-of-bounds Read in Openssl

HeartBleed Tester & Exploit --------------------------- NB Ne...

Quest InTrust Annotation Objects ActiveX Control Add Method Vulnerability

Added: 04/27/2012 BID: 52765 OSVDB: 80662 Background InTrust collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems. Problem Quest Intrust Annotation Objects ActiveX Control AnnotateX.dll is vulnerable to remote code execution due to an input validation error...

VanDyke AbsoluteFTP FTP Client LIST Overflow

Added: 12/12/2011 BID: 50614 OSVDB: 77105 Background VanDyke AbsoluteFTP is a popular free FTP client. AbsoluteFTP was replaced by SecureFX in 1998, and support for AbsoluteFTP ended in 2007. Problem The AbsoluteFTP client contains a buffer overflow vulnerability when parsing file and directory...

Universal Fuzzer by Codenomicon !

Codenomicon is a Finland based Information Security company. Recently it has released a universal fuzzer, a fuzz testing solution that combines heuristics and multiple fuzzers with a graphical user interface, automated test executions and reporting features. Fuzzing has been popular between hacke...

Air Files v2.6 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Air Files v2.6 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id339732484?mt=8...

Share v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8...

iSO Filer Lite 2.1.0 - Directory Traversal

iSO Filer Lite 2.1.0 - Directory Traversal Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Teste...

FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: email protected, email protected, Sunlight Software Link: http://itunes.apple.com/kr/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Version: 1....

SideBooks v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: email protected, email protected, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray

. . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow heap spray By : MadjiX , Dz8aHotmail.com Discovered by Blake: http://www.exploit-db.com/exploits/14309/ Greetings: His0k4 , Bibi-info , The g0bl!n y , sec4ever.com Tested on Windows Xp Sp3 Fr,with IE6 sh =...

Notepad++ 5.4.5 Buffer Overflow

/ 0dayNotepad++ 5.4.5 Local .C/CPP Stack Buffer Overflow POC by fl0 fl0w / / LATEST FIXES Notepad++ v5.4.5 fixed bugs from v5.4.4 : 1. Fix plugins shortcuts not working bug. 2. Fix the tooltip on toolbar display bug for the plugins icons. 3. Fix a crash that was occurring when searching in files...

ZTE ZXDSL 831 II Modem Arbitrary Add Admin User Vulnerability

No description provided by source. ----------------------------------------------------- -- Found By SuNHouSe2 ALGERIAN HaCkEr -- -- Made in "Maghnia City" DZ -- -- Contact : [email protected] -- -- Greetz to : His0k4 all my friends -- -- Good Ramadan to all muslims --...

[EXPL] Microsoft Windows Message Queuing Service Stack Overflow Vulnerability &#40;MS07-065, Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit

No description provided by source. $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321...