Immunity Canvas: IE_DUMPFILES

Name| iedumpfiles ---|--- CVE| CVE-2010-0255 Exploit Pack| CANVAS Description| Internet Explorer local file include Notes| CVE Name: CVE-2010-0255 VENDOR: Microsoft Repeatability: Infinite client side - no crash MSRC: https://vulners.com/cve/CVE-2010-0255 CVS URL:...

AIC Audio Player 1.4.1.587 Local Crash PoC

Exploit for unknown platform in category local exploits ========================================== AIC Audio Player 1.4.1.587 Local Crash PoC ========================================== !/usr/bin/python Title: AIC Audio Player 1.4.1.587 Local Crash PoC Author: b0telh0 Link:...

Immunity Canvas: IE_COMMENTS

Name| iecomments ---|--- CVE| CVE-2010-0244 Exploit Pack| CANVAS Description| iecomments Notes| CVE Name: CVE-2010-0244 VENDOR: Microsoft MSADV: MS10-0?? VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx Date public: 12/25/2009...

Immunity Canvas: MS_NTVDM

Name| msntvdm ---|--- CVE| CVE-2010-0232 Exploit Pack| CANVAS Description| NtVdmControl-KiTrap0d local Notes| CVE Name: CVE-2010-0232 VENDOR: Microsoft Notes: This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows which is essentially all of them. It needs a writable directory to...

NIPrint LPD Request Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NIPrint LPD...

Immunity Canvas: SUN_JAVA_HSBPARSER_LINUX

Name| sunjavahsbparserlinux ---|--- CVE| CVE-2009-3867 Exploit Pack| CANVAS Description| sunjavahsbparserlinux Notes| URL: http://seclists.org/bugtraq/2009/Nov/37 CVE Name: CVE-2009-3867 VENDOR: Sun CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3867...

Immunity Canvas: AIXCMSD

Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...

Immunity Canvas: MS09_051

Name| ms09051 ---|--- CVE| CVE-2009-0555 Exploit Pack| CANVAS Description| ASFAudiomedia Parsing bug Notes| CVE Name: CVE-2009-0555 VENDOR: Microsoft MSADV: MS09-051 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS09-051.mspx Note: This is a client-side exploit ...

Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

SMB2 Exploit Fitted into Metasploit; Attacks Likely

Fully functional exploit code for the still unpatched Windows SMB v2 vulnerability has been released to the public domain via the freely available Metasploit point-and-click attack tool, raising the likelihood for remote in-the-wild code execution attacks. The exploit, created and released by...

Remote exploit released for Windows Vista SMB2 worm hole

Security researchers at penetration testing firm Immunity have created a reliable remote exploit capable of spawning a worm through an unpatched security hole in Microsoft’s dominant Windows operating system. A team of exploit writers led by Kostya Kortchinsky attacked the known SMB v2...

Immunity Canvas: NGINX

Name| nginx ---|--- CVE| CVE-2009-2629 Exploit Pack| CANVAS Description| Jinx Notes| CVE Name: CVE-2009-2629 VENDOR: nginx Notes: Use -O execshield:0 against Ubuntu targets - the default is to assume you want execshield avoidance. Repeatability: Infinite References:...

Immunity Canvas: SMB2_NEGOTIATE_REMOTE

Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: IISFTP_NLST

Name| iisftpnlst ---|--- CVE| CVE-2009-3023 Exploit Pack| CANVAS Description| IISFTPNLST Notes| CVE Name: CVE-2009-3023 VENDOR: Microsoft References: http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070467.html CVE Url: https://vulners.com/cve/CVE-2009-3023 Date public: 08/31/09 CVS...

Immunity Canvas: PROTO_OPS_NULL

Name| protoopsnull ---|--- CVE| CVE-2009-2692 / CVE-2009-2698 Exploit Pack| CANVAS Description| protoopsnull / udpsendmsg Notes| References: 'http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html' Date public: VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2009-2692 CVE Name:...

Immunity Canvas: FCKEDITOR

Name| FCKEditor ---|--- CVE| CVE-2009-2265 Exploit Pack| CANVAS Description| FCKEditor Notes| CVE Name: CVE-2009-2265 VENDOR: Known Vunlerable Versions: 'ColdFusion MX 8 - 8.01', 'osCMax =2.0', 'RunCMS =1.3a', 'Falt4 CMS', 'Many more to come!' Notes: This exploit has two different variants - one...

Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

Immunity Canvas: ZENCART_REMOTE

Name| zencartremote ---|--- CVE| CVE-2009-2255 Exploit Pack| CANVAS Description| zencartremote Notes| Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2255 VENDOR: www.zen-cart.com/ CVSS: 6.8 CVE Name: CVE-2009-2255...

Immunity Canvas: SUGARCRM_FILEUPLOAD

Name| sugarcrmfileupload ---|--- CVE| CVE-2009-2146 Exploit Pack| CANVAS Description| sugarcrmfileupload Notes| CVE Name: CVE-2009-2146 VENDOR: http://www.sugarcrm.com Notes: Tested on SugarCRM 5.2.0c. This exploits needs a valid username and password for SugarCRM to exploit as the vulnerability...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...