Oracle Java ICC Profile 'crdi' Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java Runtime running on OSX or Linux. This vulnerability does not affect java running on Windows. User interaction is required to exploit this vulnerability in that the target must visit...

Fake Mac OSX AV Continues To Spread

Attacks targeted at users of Apples Mac OSX may be more common than previously thought, according to a post on Kaspersky Lab’s Securelist blog. A recent spate of attacks that use infected Google Image searches to compromise user machines is also serving up fake anti-virus to users of OSX, accordi...

os-x/x86 intel reverse_tcp shell x86_64 - 131 bytes

;osx x64 reverse tcp shellcode 131 bytes ;Jacob Hammack ;email protected ;http://www.hammackj.com ; ;props to http://www.thexploit.com/ for the blog posts on x64 osx asm ;I borrowed some of his code ; ;OSX reverse tcp shell 131 bytes ;replace FFFFFFFF around byte 43 with the call back ip in hex...

OSX/Intel reverse_tcp shell x86_64 - 131 bytes

OSX/Intel reversetcp shell x8664 - 131 bytes. Shellcode exploit for osx platform ;osx x64 reverse tcp shellcode 131 bytes ;Jacob Hammack ;[email protected] ;http://www.hammackj.com ; ;props to http://www.thexploit.com/ for the blog posts on x64 osx asm ;I borrowed some of his code ; ;OSX...

Multi Gather Pidgin Instant Messenger Credential Collection

This module will collect credentials from the Pidgin IM client if it is installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Multi Gather Pidgin Instant Messenger...

Immunity Canvas: CVE_2011_0182

Name| CVE20110182 ---|--- CVE| CVE-2011-0182 Exploit Pack| CANVAS Description| CVE-2011-0182: i386setldt Notes| CVE Name: CVE-2011-0182 VENDOR: Apple Notes: Tested on OSX 10.6.6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-0182 NOTES:...

Heap overflow in RealPlayer 14.0.1.633

Luigi Auriemma Application: RealPlayer http://www.real.com Versions: = 14.0.1.633 Platforms: Windows, Macintosh OSX, Linux, Symbian, Palm Bug: heap overflow Exploitation: remote Date: 21 Mar 2011 found 17 Feb 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction ...

RealPlayer <= 14.0.1.633 Heap Overflow Vulnerability

No description provided by source. Luigi Auriemma Application: RealPlayer http://www.real.com Versions: = 14.0.1.633 Platforms: Windows, Macintosh OSX, Linux, Symbian, Palm Bug: heap overflow Exploitation: remote Date: 21 Mar 2011 found 17 Feb 2011 Author: Luigi Auriemma e-mail:...

RealPlayer <= 14.0.1.633 Heap Overflow Vulnerability

Exploit for windows platform in category dos / poc Luigi Auriemma Application: RealPlayer http://www.real.com Versions: = 14.0.1.633 Platforms: Windows, Macintosh OSX, Linux, Symbian, Palm Bug: heap overflow Exploitation: remote Date: 21 Mar 2011 found 17 Feb 2011 Author: Luigi Auriemma e-mail:...

Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure

// source: https://www.securityfocus.com/bid/46982/info Apple Mac OS X is prone to a local information-disclosure vulnerability because of an integer-overflow error in the HFS subsystem. A local attacker can exploit this issue to obtain sensitive information that may lead to further attacks. Due ...

RealPlayer 14.0.1.633 - Heap Overflow

Luigi Auriemma Application: RealPlayer http://www.real.com Versions: = 14.0.1.633 Platforms: Windows, Macintosh OSX, Linux, Symbian, Palm Bug: heap overflow Exploitation: remote Date: 21 Mar 2011 found 17 Feb 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction ...

RealPlayer 14.0.1.633 - Heap Overflow

RealPlayer 14.0.1.633 - Heap Overflow Luigi Auriemma Application: RealPlayer http://www.real.com Versions: = 14.0.1.633 Platforms: Windows, Macintosh OSX, Linux, Symbian, Palm Bug: heap overflow Exploitation: remote Date: 21 Mar 2011 found 17 Feb 2011 Author: Luigi Auriemma e-mail:...

THC-HYDRA v6.1 brute force tool Released !

One of the most famous network logon cracker - THC-HYDRA, has been updated! We now have THC-HYDRA version 6.1 in less than a fortnight! "THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security...

DEFT Linux v6 RC - New Release Download

"DEFT is a new concept of Computer Forensic live system that uses LXDE as desktop environment and thunar file manager and mount manager as tool for device management.It is a very easy to use system that includes an excellent hardware detection and the best free and open source applications...

os-x/x86 intel - setuid shell x86_64 - 51 bytes

Exploit for os-x/x86 platform in category shellcode ========================================== OSX/Intel - setuid shell x8664 - 51 bytes ========================================== / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Versio...

OSX/Intel - setuid shell x86_64 - 51 bytes

OSX/Intel - setuid shell x8664 - 51 bytes. Shellcode exploit for osx platform / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text globa...

Apple iTunes 8.1.1 (Mac OSX) - ITms Overflow (Metasploit)

$Id: itmsoverflow.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

[CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch 1. Advisory Information Title: Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch Advisory Id: CORE-2010-08...

Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)

$Id: quicktimertspcontenttype.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)

$Id: ufoai.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...