Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP Bypass) (MS12-037)

Microsoft Internet Explorer 8 - Fixed Col Span ID Full ASLR + DEP Bypass MS12-037 function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free +=...

Foxit Reader除零拒绝服务漏洞

BUGTRAQ ID: 55734 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader 5.4.3.0920及其他版本处理PDF文档时存在拒绝服务漏洞，可允许远程攻击者使受影响应用崩溃。 0 Foxit Reader 厂商补丁： Foxit ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.foxitsoft.com/wac/serverintro.php Title : Foxit Reader suffers from Division By Zero Versio...

Foxit Reader 5.4.3.0920 - Crash (PoC)

Foxit Reader 5.4.3.0920 - Crash PoC Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerabili...

Vice City Multiplayer Server 0.3z R2 - Remote Code Execution

/ Exploit Title: Vice City Multiplayer remote code execution Server Date: 22/08/2012 Exploit Author: Sasuke78200 Benjaa Toufik Software Link: http://www.vicecitymultiplayer.com/downloads/03zr2/server0.3zr2pawnwinupdated2.zip Version: 0.3z R2 Tested on: Windows XP SP3, Windows 7 Ultimate SP1,...

Apple QuickTime - QuickTime.util.QTByteObject Initialization Security Checks Bypass

Apple QuickTime - QuickTime.util.QTByteObject Initialization Security Checks Bypass / c SECURITY EXPLORATIONS 2012 poland / / http://www.security-explorations.com / / Apple QuickTime Java extensions / / quicktime.util.QTByteObject initialization security checks bypass / In order to test the POC...

PBBoard 2.1.4 - Local File Inclusion

PBBoard 2.1.4 - Local File Inclusion Exploit Title: PBBoard 2.1.4 Local File Inclusion Software Link: http://www.pbboard.com/PBBoardv2.1.4.zip Author: n4ss1m Date: 25-05-2012 Tested on: win/linux Home : www.Sec4ever.com Exploit-DB note: Need to be logged in, at the very least, as a standard user ...

[CVE-2012-1002] OpenConf <= 4.11 (author/edit.php) Blind SQL Injection Vulnerability

-------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Blind SQL Injection Vulnerability -------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom...

PHP Agenda 2.2.8 SQL injection Vulnerability

Exploit for php platform in category web applications Title:Simple PHP Agenda 2.2.8 SQLi Vulnerability Version: php-agenda 2.2.8 Author/Found by: loneferret Manifacturer/Software link: http://sourceforge.net/projects/php-agenda/files/latest/download Other vulnerability:...

Adobe Photoshop 12.1 - .tiff Parsing Use-After-Free

Adobe Photoshop 12.1 - .tiff Parsing Use-After-Free Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check

Sockso is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1224

creationtimestamp| type| source ---|---|--- 2012-02-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36870...

Pragyan CMS v 3.0 remote file disclosure-vulnerability warning-the black bar safety net

Title: Pragyan CMS v 3.0 = Remote File Disclosure Author Or4nG. M4n Download address http://space.dl.sourceforge.net/project/pragyan/pragyan/3.0/PragyanCMS-v3.0-beta.tar.bz2 The location of the defect download.lib.php line 1 6 index.php line 2 3 4 $GET'fileget' Test http://www.xxx.com /Pragyan/?...

CVE-2012-6643

creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36531 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36532...

IrfanView - .tiff Image Processing Buffer Overflow

IrfanView - .tiff Image Processing Buffer Overflow Application: IrfanView TIFF Image Processing Buffer Overflow Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47065 PRL: 2011-10 Author: Francis Provencher Protek Research Lab's Website:...

IrfanView FlashPix PlugIn - Double-Free

IrfanView FlashPix PlugIn - Double-Free Application: IrfanView FlashPix PlugIn Double-Free Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47322 PRL: 2011-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

CVE-2011-5045

creationtimestamp| type| source ---|---|--- 2011-12-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36468...

Mini-Stream 3.0.1.1 Buffer Overflow Exploit

Exploit for windows platform in category local exploits $Id: ministream.rb 14155 2011-11-04 08:20:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

MicroP 0.1.1.1600 (MPPL File) Stack Buffer Overflow

Exploit for windows platform in category local exploits $Id: micropmppl.rb 13114 2011-07-07 06:29:37Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

TutorialMS v1.4 (show) Remote SQL Injection Vulnerability

Summary TutorialMS is a free content management system, developed specifically for tutorial pages. It is written in PHP and uses MySQL as a database. TutorialMS offers all the usual features you need to build quick and easy your own tutorial page, without great programming knowledge. Description...

CA ARCserve D2D r15 - Web Service Servlet Code Execution

CA ARCserve D2D r15 - Web Service Servlet Code Execution Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server...