Immunity Canvas: ADOBE_FLASH_MP4_CPRT

Name| adobeflashmp4cprt ---|--- CVE| CVE-2012-0752 Exploit Pack| CANVAS Description| adobeflashmp4cprt Notes| CVE Name: CVE-2012-0752 Vendor: Adobe Notes: Usage: python ./exploits/clientd/clientd.py -l 192.168.1.109 -d 5555 -O serverport:8080 -O allowedattackmodules:adobeflashmp4cprt -O...

Immunity Canvas: MS12_005

Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...

Immunity Canvas: MS12_004

Name| ms12004 ---|--- CVE| CVE-2012-0003 Exploit Pack| CANVAS Description| MS12004 Notes| CVE Name: CVE-2012-0003 VENDOR: Microsoft NOTES: This exploit will work on Internet Explorer 8. Repeatability: Single References: http://technet.microsoft.com/en-us/security/bulletin/ms12-004 CVE Url:...

Immunity Canvas: STRUTSCODEINJECTION

Name| strutsCodeInjection ---|--- CVE| CVE-2012-0394 Exploit Pack| CANVAS Description| Struts Code Injector Notes| CVE Name: CVE-2012-0394 VENDOR: Apache Notes: CVE-2012-0394 - Struts = 2.2.1.1 ExceptionDelegator When an exception occurs while applying parameter values to properties, the value is...

Immunity Canvas: FIREFOX_NSSVGVALUE

Name| firefoxnsSVGValue ---|--- CVE| CVE-2011-3658 Exploit Pack| CANVAS Description| firefoxnsSVGValue Notes| CVE Name: CVE-2011-3658 VENDOR: Mozilla Repeatability: One Shot Note: CVE Url: https://vulners.com/cve/CVE-2011-3658 Date public: 09/25/2008...

Immunity Canvas: MS11_098

Name| ms11098 ---|--- CVE| CVE-2011-2018 Exploit Pack| CANVAS Description| MS11-098 Notes| CVE Name: CVE-2011-2018 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-098 Reliably exploits Windows XP to 7 32-bit only. When executed, this will get a callback that run...

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)

!/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th 2011 Tested on: Windows XP SP3 Professional English...

GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc)

Exploit for windows platform in category dos / poc !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th...

Immunity Canvas: JAVA_RHINO

Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...

Immunity Canvas: MS11_080

Name| ms11080 ---|--- CVE| CVE-2011-2005 Exploit Pack| CANVAS Description| MS11-080 Notes| CVE Name: CVE-2011-2005 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-080 Reliably exploits Windows XP SP3 and 2003 SP2 32/64-bit. When executed, this will get a callbac...

Immunity Canvas: PLONE

Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...

Dave Aitel Discusses Hacking Groups' Agendas

It has come to this: CNN is now running segments on the attacks attributed to LulzSec, Anonymous and other groups and the FBI raids on suspected members of those crews. The network had Dave Aitel of Immunity Inc. on this morning to discuss the effects of the recent arrests and what the groups’...

Immunity Canvas: MS11_054

Name| ms11054 ---|--- CVE| CVE-2011-1888 Exploit Pack| CANVAS Description| MS11-054 Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows XP SP3 x86, Windows 2003 SP2 x86/64, Windows 2008 x86/64, Windows 7 x86/64. VENDOR: Microsoft CVE Url:...

Immunity Canvas: FIREFOX_ARRAY_REDUCERIGHT

Name| firefoxarrayreduceright ---|--- CVE| CVE-2011-2371 Exploit Pack| CANVAS Description| Firefox Array reduceRight Notes| CVE Name: CVE-2011-2371 CVE URL: https://vulners.com/cve/CVE-2011-2371 Repeatability: Infinite...

Immunity Canvas: FLASH_APSB11_18

Name| flashAPSB1118 ---|--- CVE| CVE-2011-2110 Exploit Pack| CANVAS Description| flashAPSB1118 Notes| CVE Name: CVE-2011-2110 VENDOR: Adobe Notes: This is an exploit found in the wild, targeting Windows Flash player versions 10.3.181.23 and earlier. VersionsAffected: Windows Flash Player versions...

Immunity Canvas: FIREFOX_CHANNELREDIRECT

Name| firefoxchannelredirect ---|--- CVE| CVE-2011-0065 Exploit Pack| CANVAS Description| Firefox Notes| CVE Name: CVE-2011-0065 Repeatability: Infinite MFSA: http://www.mozilla.org/security/announce/2011/mfsa2011-13.html...

Immunity Canvas: MS11_032

Name| ms11032 ---|--- CVE| CVE-2011-0034 Exploit Pack| CANVAS Description| MS11-032 Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows XP SP3 x86, Windows 2003 SP2 x86/64, Windows 2008 x86/64, Windows 7 x86/64. VENDOR: Microsoft CVE Url:...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

Immunity Canvas: CVE_2011_0182

Name| CVE20110182 ---|--- CVE| CVE-2011-0182 Exploit Pack| CANVAS Description| CVE-2011-0182: i386setldt Notes| CVE Name: CVE-2011-0182 VENDOR: Apple Notes: Tested on OSX 10.6.6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-0182 NOTES:...