linux/x86 write(0 Hello core!\n"" 12)

No description provided by source. / writehello-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it to see if my dup2loop worked. If you don't get "Hello core!\n" back it's a good indicator your shell won't be functional th...

'Blitzableiter' Protects Against Flash Player Exploits

A German security researcher has released an open-source tool that analyses and cleans up Flash code before playback to prevent security holes in Adobe Flash Player from being exploited. The tool, called “Blitzableiter” lightning rod, is the brainchild of Felix “FX” Lindner, a well-known hacker w...

Despite Danger, Adobe Says JavaScript Support Important

Despite the fact that the majority of malware exploits use JavaScript to trigger an attack in Adobe’s PDF Reader product, the company says it’s impossible to completely remove JavaScript support without causing major compatibility problems. In a Q&A listen to podcast with Threatpost editors Denni...

CVE-2010-2257

creationtimestamp| type| source ---|---|--- 2010-01-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10983...

W-Agora 4.2.1 - Multiple Vulnerabilities

W-Agora 4.2.1 - Multiple Vulnerabilities ======================================================================================== | Title : W-Agora v.4.2.1 Multiple Vulnerabilities | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

SAP NetWeaver performanceProvierRoot - XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Information disclose Exploits: YES Reported: 01.04.2010 Vendor response: 08.04.2010 Date of Public Advisory: 17.06.2011 CVSS: 5.0 Author:Dmitriy Chastuhin Description SAP NetWeaver...

SAP NetWaver Virus Scan Interface - multiple XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:Linked XSS Vulnerability Exploits: YES Reported: 01.04.2010 Vendor response:08.04.2010 Date of Public Advisory:11.11.2011 CVSS:4.3 Author: Dmitriy Evdokimov Description SAP Netweaver Virus Scan Interfa...

MP4 Player 4.0 - Local Crash (PoC)

MP4 Player 4.0 - Local Crash PoC !usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000;...

CVE-2009-4581

creationtimestamp| type| source ---|---|--- 2009-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10793...

PDF Containing Obfuscated Name Objects

New exploits were released for several remote code execution vulnerabilities that were discovered in the way Adobe Acrobat Reader and Foxit Reader handle specially crafted PDF files. Although various security products provide coverage against many malformed PDF files vulnerabilities, these new...

CVE-2009-4679

creationtimestamp| type| source ---|---|--- 2009-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10754 2009-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33440...

Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow

!/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP English 12.27.2009 Author: Ron Henry -...

CVE-2009-4435

creationtimestamp| type| source ---|---|--- 2009-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33420 2009-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33419...

CVE-2009-4437

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10520...

CVE-2009-4142

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33415 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33414...

SAP RFC SDK — Memory Corruption

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6400-7.20 and SAP GUI 7.10-7.20 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 16.12.2009 Vendor response: 16.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov...

CVE-2009-4429

creationtimestamp| type| source ---|---|--- 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10485 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33410...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

CVE-2009-3701

creationtimestamp| type| source ---|---|--- 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33406 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33408 2009-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33407 2009-12-17...

Ez Faq Maker Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...