247 matches found
Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell [email protected] Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability...
Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow
Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow !/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability...
Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow
!/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability. However, according to securityfocus an exploit is available...
Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute
This module allows remote attackers to install and execute arbitrary files on a users file system via AeXNSPkgDLLib.dll 6.0.0.1418. This module was tested against Symantec Altiris Deployment Solution 6.9 sp3. Module Options msf use...
Mozilla Firefox 3.5 Heap Spray OS X
!/usr/bin/env python FireFox 3.5 Heap Spray OS X Exploit Modified by: DrIDE Originally Discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState Thanks to HDM Tested on OS X 10.5.7 from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler impo...
Microsoft Office Web Components Spreadsheet - ActiveX 'OWC10/11' Remote Overflow
Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll installed Usage : python ieowc.py...
Apple iTunes 8.1.1 (ITMS) Multiple Protocol Handler BOF Exploit (meta)
No description provided by source. $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/...
Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC
Exploit for unknown platform in category dos / poc ========================================================== Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC ========================================================== !/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala...
Apple Safari - RSS feed: Buffer Overflow via libxml2 (PoC)
Apple Safari - RSS feed: Buffer Overflow via libxml2 PoC !/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala CVE-2008-3529 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.com , http://www.netragard.com The application...
Ubuntu 8.10 : openjdk-6 vulnerabilities (USN-748-1)
It was discovered that font creation could leak temporary files. If a user were tricked into loading a malicious program or applet, a remote attacker could consume disk space, leading to a denial of service. CVE-2006-2426, CVE-2009-1100 It was discovered that the lightweight HttpServer did not...
Ubuntu: Security Advisory (USN-748-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu USN-748-1 (openjdk-6)
The remote host is missing an update to openjdk-6 announced via advisory USN-748-1. OpenVAS Vulnerability Test $Id: ubuntu7481.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7481.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-748-1 openjdk-6 Authors: Thoma...
Safari 3.2.2 XML Crash Exploit
Author : Ahmed Obied [email protected] - Tested using: - Safari 3.2.2 on Windows - Safari 4 BETA on Windows Usage : python safari.py port import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandlerBaseHTTPRequestHandler: def getexploitself: exploit = ...
Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash
Author : Ahmed Obied [email protected] - Tested using: - Safari 3.2.2 on Windows - Safari 4 BETA on Windows Usage : python safari.py port import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandlerBaseHTTPRequestHandler: def getexploitself: exploit = ...
MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (fast)
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer 7 Memory Corruption Exploit MS09-002 fast ================================================================== Author : Ahmed Obied email protected - Base...
Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)
Microsoft Internet Explorer 7 - Memory Corruption MS09-002 Author : Ahmed Obied [email protected] - Based on the code found by str0ke in the wild for MS09-002 - Tested using Internet Explorer 7.0.5730.11 on Windows XP SP2 Usage : python iems09002.py port import sys, socket from BaseHTTPServer...
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. Module Options msf use...
CVE-2008-1891
Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus, 2 %2b encode...
Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability
No description provided by source. ------------------------------------------------------------------------------------ Digital Security Research Group DSecRG Advisory DSECRG-08-018...
Adobe util.printf() Buffer Overflow
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat Professional use exploit/windows/browser/adobe/utilprintf msf undefinedutilprintf show actions ...actions... msf undefinedutilprintf set ACTION msf undefinedutilprintf show options ...show and set options... msf...