Immunity Debugger buffer overflow

Buffer overflow during software update process...

NGS00016 Technical Advisory: Immunity Debugger Buffer Overflow

======= Summary ======= Name: Immunity Debugger Buffer Overflow Release Date: 22 March 2011 Reference: NGS00016 Discoverer: Paul Harrington Vendor: Immunity Inc Vendor Reference: Support 3171 Systems Affected: Windows Risk: Low Status: Fixed ======== TimeLine ======== Discovered: 28 October 2010...

Immunity Debugger v1.82 latest version download !

Immunity Debugger v1.82 latest version download ! "Immunity Debugger is a powerful new way to write exploits, analyze malware, and reverse engineer binary files. It builds on a solid user interface with function graphing, the industry's first heap analysis tool built specifically for heap creatio...

Infiltrate 2011 - Information security Event !

Infiltrate is a deep technical security conference that will focus entirely on offensive technical issues. It will be the single-most important event for those who are focused on the technical aspects of offensive security issues. No policy or high-level presentations, just hard-core thought...

Immunity Canvas: MS_TASKSCHEDULER

Name| mstaskscheduler ---|--- CVE| CVE-2010-2743 Exploit Pack| CANVAS Description| MSTASKSCHEDULER Notes| CVE Name: CVE-2010-2743 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows Vista and Windows 7. This vulnerability is...

Immunity Canvas: CVE_2010_3847

Name| CVE20103847 ---|--- CVE| CVE-2010-3847 Exploit Pack| CANVAS Description| CVE20103847 Notes| CVE Name: CVE-2010-3847 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat and derived distributions. If it fails but you think the target is vulnerable, try Tavis'...

Immunity Canvas: CVE_2010_3856

Name| CVE20103856 ---|--- CVE| CVE-2010-3856 Exploit Pack| CANVAS Description| CVE20103856 Notes| CVE Name: CVE-2010-3856 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat derived distributions, this may also work against Ubuntu. If it fails but you think the...

Immunity Canvas: CVE_2010_4344

Name| CVE20104344 ---|--- CVE| CVE-2010-4344 Exploit Pack| CANVAS Description| CVE-2010-4344 Notes| CVE Name: CVE-2010-4344 VENDOR: exim Repeatability: Infinite References: 'http://bugs.exim.org/showbug.cgi?id=787', 'http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html' CVE Url:...

Immunity Canvas: LINUX_RDS

Name| linuxrds ---|--- CVE| CVE-2010-3904 Exploit Pack| CANVAS Description| linuxrds Notes| References: 'http://www.vsecurity.com/resources/advisory/20101019-1/' Date public: 2010-10-19 VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2010-3904 CVE Name: CVE-2010-3904...

Immunity Canvas: MS_ENABLEEUDC

Name| msenableeudc ---|--- CVE| CVE-2010-4398 Exploit Pack| CANVAS Description| Windows EnableEUDC Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows 7 x86/64. VENDOR: Microsoft CVE Name: CVE-2010-4398...

Immunity Canvas: IE_SETUSERCLIP

Name| iesetuserclip ---|--- CVE| CVE-2010-3962 Exploit Pack| CANVAS Description| iesetuserclip Notes| Date public: 11/04/2010 Notes: This bug was discovered in the wild. IE6, 7 and 8 are vulnerable to this bug, but because of its behaviour some versions will not be exploitable. The only full...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

Immunity Canvas: FIREFOX_APPENDCHILD

Name| firefoxappendchild ---|--- CVE| CVE-2010-3765 Exploit Pack| CANVAS Description| firefoxappendchild Notes| CVE Name: CVE-2010-3765 VENDOR: Mozilla Notes: Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers. This exploit can only b...

Immunity Canvas: ADOBE_SHOCKWAVE_RCSLCHUNK

Name| adobeshockwavercslchunk ---|--- CVE| CVE-2010-3653 Exploit Pack| CANVAS Description| adobeshockwavercslchunk Notes| CVE Name: CVE-2010-3653 Vendor: Adobe Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN with IE 7. Windows XP Home SP3 EN with IE7...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

SmarterMail 7.x Cross Site Scripting

Source URL http://cloudscan.blogspot.com/2010/10/vendor-smartertoolscom-smartermail-7x.html Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.1 B...

SmarterMail 7.x (7.2.3925) LDAP Injection Vulnerability

Exploit for php platform in category web applications ======================================================= SmarterMail 7.x 7.2.3925 LDAP Injection Vulnerability ======================================================= Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author :...

SmarterMail 7.x (7.2.3925) Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ==================================================================== SmarterMail 7.x 7.2.3925 Stored Cross Site Scripting Vulnerability ==================================================================== Vendor: smartertools.com SmarterMail 7...

SmarterMail 7.2.3925 - LDAP Injection

SmarterMail 7.2.3925 - LDAP Injection Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Test...