Immunity Canvas: JAVA_FORNAME_GETFIELD

Name| javaforNamegetField ---|--- CVE| CVE-2012-4681 Exploit Pack| CANVAS Description| Java forName/getField Method Invocation Sandbox Bypass Notes| CVE Name: CVE-2012-4681 VENDOR: Sun Notes: There is a method invocation vulnerability using sun.awt.SunToolkit.getField This vulnerability can then ...

Simple Web Server 2.2-rc2 ASLR Bypass Exploit

Exploit for windows platform in category remote exploits use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: Dhruval email protected...

Immunity Canvas: ADOBE_FLASH_OTF_PARSING

Name| adobeflashotfparsing ---|--- CVE| CVE-2012-1535 Exploit Pack| CANVAS Description| adobeflashotfparsing Notes| CVE Name: CVE-2012-1535 VENDOR: Adobe Notes: This exploit takes advantage of a integer overflow that leads to a heap based buffer overflow. The kerntable contains an integer that wh...

Appeals Court Calls Bank's Security "Commercially Unreasonable"

The United States Court of Appeals on Tuesday reversed a lower court’s decision, ruling that the IT security system used by a domestic bank was not “commercially reasonable” to protect its customers. The ruling PDF, in the case of People’s United Bank formerly Ocean Bank of Maine versus Patco...

Immunity Canvas: MYSQL_LOGIN_REMOTE

Name| mysqlloginremote ---|--- CVE| CVE-2012-2122 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2012-2122 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=??? Notes: Mysql authentication can be bypassed by bruteforcing a wrong password until the server miss...

Immunity Debugger Application Detection

Binary data 6884.prm...

Immunity Canvas: ITUNES_10_6_1

Name| Itunes1061 ---|--- CVE| CVE-2012-0677 Exploit Pack| CANVAS Description| Itunes 10.4 to 10.6.1 Buffer Overflow Notes| CVE Name: CVE-2012-0677 VENDOR: Apple Notes: Buffer overflow SEH based for Itunes 10.4 to 10.6.1 on Windows XP SP2 VersionsAffected: Itunes 10.4 to 10.6.1 Repeatability:...

Immunity Canvas: JAVA_ATOMICREFERENCEARRAY

Name| javaAtomicReferenceArray ---|--- CVE| CVE-2012-0507 Exploit Pack| CANVAS Description| Java AtomicReferenceArray Type Confusion Sandbox Bypass Notes| CVE Name: CVE-2012-0507 VENDOR: Sun Notes: There is a Type Confusion vulnerability in java.util.concurrent.atomic.AtomicReferenceArray class...

Immunity Debugger v1.85 32-bit Memmory Corruption

Exploit for windows platform in category local exploits //////////////////////////////////////////////////////////////////////////////// //Title: Immunity Debugger v1.85 32-bit Memmory Corruption //Author: Ayrbyte //Link: debugger.immunityinc.com //Versi: v1.85 //Tested on: Windows 7 //Fb:...

Immunity Canvas: PHP_CGI_REMOTE

Name| phpcgiremote ---|--- CVE| CVE-2012-1823 Exploit Pack| CANVAS Description| phpcgiremote Notes| CVE Name: CVE-2012-1823 VENDOR: www.php.net Notes: Also see: http://www.kb.cert.org/vuls/id/520827 Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1823 CVS...

MySQL 5.5.20 Unspecified RCE Vulnerability

MySQL is prone to an unspecified remote code execution RCE vulnerability. This VT has duplicated the VT MySQL SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

Design/Logic Flaw

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

CVE-2011-5087

Summary: CVE-2011-5087 is described as an unspecified vulnerability in AdAstrA TRACE MODE Data Center that allows remote attackers to read arbitrary files through unknown vectors, with demonstration tied to the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS. Affected product (per documents): ...

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

Immunity Canvas: CVE_2012_1182

Name| CVE20121182 ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182 Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date Public: 04/10/2012 CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-CVE-2012-118...

Immunity Canvas: CVE_2012_1182_NONX

Name| CVE20121182NONX ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182-NONX Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date public: 04/10/2012 CVE Url: N/A CVSS: 0.0...

Immunity Canvas: CVE_2011_3175

Name| CVE20113175 ---|--- CVE| CVE-2011-3175 Exploit Pack| CANVAS Description| Novell ZENworks Configuration Management 0x6c Buffer Overflow Notes| CVE Name: CVE-2011-3175 VENDOR: Novell Notes: Tested on ZenWork Configuration Managment 10 SP3 on Windows Server 2003 SP1 This exploit should work an...

Court Ruling: Forced Decryption Violates the Fifth, Sometimes

The Eleventh Circuit of the US Court of Appeals recently handed down a landmark ruling, establishing a precedent under which the contents of an encrypted hard-drive are protected by the Fifth Amendment’s ban on self-incrimination. Briefly, the facts of the case are these: John Doe is suspected of...