CVE-2011-1021

creationtimestamp| type| source ---|---|--- 2010-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15774...

Acrobat Reader 9.4 - Memory Corruption

Acrobat Reader 9.4 - Memory Corruption https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15419.bin xplpdf.bin http://extraexploit.blogspot.com/2010/11/full-disclosure-xplpdf-adober-reader-94.html...

Trend Micro Internet Security Pro ActiveX extSetOwner() Code Execution

Exploit for windows platform in category remote exploits ====================================================================== Trend Micro Internet Security Pro ActiveX extSetOwner Code Execution ====================================================================== trendmicroextsetowner.rb Tren...

Microsoft Internet Explorer - MSHTML Findtext Processing

/textarea function Search var textinput = document.getElementById"Abysssec"; var textRange = textinput.createTextRange; textRange.findTextunescape"%u4141",-1; textRange.selectdocument.getElementById'd'; document.body.appendChildtextinput; Abysssec...

Mozilla Firefox CSS - font-face Remote Code Execution

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moabu-15-mozilla-firefox-css-font-face-remote-code-execution-vulnerability/...

CVE-2010-2752

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15104...

Intel Video Codecs 5.0 - Remote Denial of Service

Intel Video Codecs 5.0 - Remote Denial of Service Intel Video Codecs 5 Remote Denial of Service Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: August 27, 2010 Filename: ir5032.dll Version: 5.2562.15.55 Description: A remote user can cause denia...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

μTorrent (uTorrent) 2.0.3 - DLL Hijacking

Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and placed in the utorrent.exe directory, the...

CVE-2007-3336

creationtimestamp| type| source ---|---|--- 2010-08-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14646...

Acrobat Acrobat - Font Parsing Integer Overflow

Acrobat Acrobat - Font Parsing Integer Overflow From the authors site: In this article, I'm going to share with you my observations and analysis on recent Adobe Acrobat Font Parsing vulnerability. Source document exists here: http://securityevaluators.com/files/papers/CrashAnalysis.pdf page 51-58...

LILDBI 1.2 Shell Upload

Exploit Title: LILDBI Shell Upload Vulnerability Date: 23.07.2010 Author: EraGoN Software Link: http://productos.bvsalud.org/product.php?id=lildbi-web〈=en Version: 1.2 Tested on: Ubuntu Linux - WinXP sp2/sp3 Dark Hackers Team Dork : allinurl:"/lildbi/ POC : The shell upload page :...

Sun Java Web Server 7.0 u7 Denial Of Service

Sun Java Web Sever 7.0 u7 Admin Interface DOS Software Package sjsws-70u7-windows-i586.zip 4fb8d1fb700d5649234a2891a4ecedea While attempting to verify http://www.exploit-db.com/exploits/14194/ which was not verified, I stumbled across semi amusing DOS: root@bt: nc -nv 192.168.48.134 8800 UNKNOWN...

Adobe Flash Reader - Live Malware

Adobe Flash Reader - Live Malware Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is...

Joomla! Component BF Quiz 1.3.0 - SQL Injection (1)

Joomla! Component BF Quiz 1.3.0 - SQL Injection 1 Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Joomla Component com_activehelper_livehelp XSS Vulnerabilities

Exploit for php platform in category web applications ============================================================== Joomla Component comactivehelperlivehelp XSS Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...

CVE-2010-1997

creationtimestamp| type| source ---|---|--- 2010-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33976...

CVE-2010-1033

creationtimestamp| type| source ---|---|--- 2010-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12302...

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attacker...