Adobe Flash Player Shader Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...

Havij <= 1.10 - Persistent XSS

No description provided by source. Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon [email protected]...

Easy Web Password 1.2 - Local Heap Memory Consumption PoC

No description provided by source. !/usr/bin/env ruby Easy Web Password V1.2 Local Heap Memory Consumption Proof of concept http://www.efssoft.com/ewpsetup.exe Register EAX 00000000 ECX 04A43C58 EDX 41414141 EDX overwrited EBX 00000001 ESP 0012A4E0 EBP 0012F140 ESI 0012A720 EDI 2FDE5000 EIP...

web wiz rich text editor 4.0 - Multiple Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is...

Opera <= 8.02 - Remote Denial of Service Exploit (2)

No description provided by source. !-- Vulnerable: Opera 8.2 Windows XP Prof. SP2 Tested opera.py ; opera opera.html [email protected] html = openopera.html, w html.writehtml style=\content: url0;\n html.writehead/head\n buff1 = 'A'32499 html.writebodyA\n+buff1+\n buff2 = 'B'153 html.writeu...

Android Web Browser - BMP File Integer Overflow Vulnerability

source: http://www.securityfocus.com/bid/28006/info Android Web Browser is prone to an integer-overflow vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts wil...

Adobe Flash Player and AIR Security Bypass (APSB14-14: CVE-2014-0517)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

Adobe Flash Player Sandbox Security Bypass (APSB14-14: CVE-2014-0520)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

Adobe Flash Player Sandbox Security Bypass (APSB14-14: CVE-2014-0518)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

Acunetix 8 Stack Buffer Overflow

Exploit Title: Acunetix Stack Based overflow Date: 24/04/14 Exploit Author: Danor Cohen An7i - http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html Vendor Homepage: http://www.acunetix.com/ Software Link: http://www.acunetix.com/vulnerability-scanner/download/ Version: 8 build...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

Fedora Update for apache-commons-fileupload FEDORA-2014-2183

Check for the Version of apache-commons-fileupload OpenVAS Vulnerability Test Fedora Update for apache-commons-fileupload FEDORA-2014-2183 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19

The javax.servlet package lacks support for rfc 1867, html file upload. This package provides a simple to use api for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest...

Pirelli Discus DRG A125g - Local Password Disclosure

Pirelli Discus DRG A125g - Local Password Disclosure !/usr/bin/perl Author: Sebastián Magof Hardware: pirelli discus DRG A125g Vulnerable file: wlbasic.html Bug: Wifi Password Disclosure Type: Local / ±lpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n";...

RealNetworks RealPlayer Denial of Service Vulnerability - July13 (Windows)

This host is installed with RealPlayer which is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerdosvulnjul13win.nasl 6093 2017-05-10 09:03:18Z teissa $ RealNetworks RealPlayer Denial of Service Vulnerability - July13 Windows Authors: Arun Kallavi Copyright:...

RealNetworks RealPlayer Denial of Service Vulnerability (Jul 2013) - Windows

RealPlayer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox 17.0.1 Crash Proof Of Concept

Exploit Title: Firefox 17.0.1 Crash PoC Date: 13.12.2012 Exploit Author: limb0 Software Link: http://www.mozilla.org/en-US/ Version: 17.0.1 Tested on: Linux +-------------------------------------------------------------+ Instruction 1.Create a new .html/.htm file and copy paste this code in...

RIM BlackBerry PlayBook information leakage

Local HTML file can send any data outside...

DropBox iOS / Android App File Theft

DropBox version 1.4.6 on iOS, 2.0.1 on Android, and Google Drive version 1.0.1 on iOS suffer from a file theft vulnerability due to allowing arbitrary javascript to be executed inside of the privileged file zone. 1 Introduction ================================================ Recently, I discover...