1644 matches found
BloXor - A Metamorphic Block Based XOR Encoder
A Metamorphic Block Based XOR Encoder. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/encoder/bloxor/bloxor' BloXor is a cross architecture metamorphic block based xor encoder/decoder for Metasploit...
[VSD] (Virtual Section Dumper) Just another Virtual Section Dumper for Windows Processes
What's VSD? VSD Virtual Section Dumper is intented to be a tool to visualize and dump the memory regions of a running 32 bits or a 64 bits process in many ways. For example, you can dump the entire process and fix the PE Header , dump a given range of memory or even list and dump every virtual...
Smadav Anti Virus 9.1 - Crash (PoC)
Smadav Anti Virus 9.1 - Crash PoC Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1...
Smadav AntiVirus 9.1 Denial Of Service
Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1 Lastest Version, should be affected...
KLA10428 LPE vulnerability in UltraVNC
An untrusted path vulnerability was found in UltraVNC. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products UltraVNC CVE list CVE-2010-5248 high Solution Update to...
KLA10321 LPE vulnerability in PKZIP
An untrusted path was found in PKZIP. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products PKZIP CVE list CVE-2010-5274 high Solution Update to latest version Impacts...
KLA10299 LPE vulnerability in Prof-UIS
An untrusted path vulnerability was found in Prof-UIS. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Changelog Exploitation Related products Prof-UIS CVE list CVE-2010-5264 high Solution Upda...
KLA10431 LPE vulnerability in KeePass Password Safe
An untrusted path vulnerability was found in KeePass Password Safe. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Exploitation Related products KeePass-Password-Safe CVE list CVE-2010-5200...
CVE-2012-3805
Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...
CVE-2012-1054
Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login...
Design/Logic Flaw
The changeuser method in the SUIDManager lib/puppet/util/suidmanager.rb in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors...
CVE-2012-1054
CVE-2012-1054 affects Puppet 2.6.x (before 2.6.14), Puppet 2.7.x (before 2.7.11), and Puppet Enterprise (PE) Users 1.0–2.0.x (before 2.0.3). The vulnerability is triggered when managing a user login file via the k5login resource, enabling local privilege escalation through a symlink attack on .k5...
Puppet Privilege Escallation
The changeuser method in the SUIDManager lib/puppet/util/suidmanager.rb in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors...
Comodo Internet Security < 5.10 kernel ImageBase Executable Handling Remote DoS
The version of Comodo Internet Security installed on the remote Windows host is affected by a denial of service vulnerability due to the way the application handles specially crafted 32-bit Portable Executable PE files with a kernel ImageBase value. C Tenable Network Security, Inc...
Microsoft Visual Studio连接器整数溢出漏洞
Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 在基于COFF符号数量的基础上分配内存时连接器link.exe存在整数溢出，构建特制的PE文件，可触发基于堆的缓冲区溢出。 要成功利用漏洞需要诱使用户通过"dumpbin"或"link /dump"工具处理特制文件。 0 Microsoft Visual Studio 2008 Shell Integrated Mode - ENU 9.0.30729 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 9.00.21022.08...
[CVE-2012-2273] Comodo Internet Security <5.10 BSOD (Win7 x64)
affected software Comodo Internet Security, until 5.9 description BSOD under Windows 7 x64 if a 32b PE with a kernel ImageBase is executed. such files are very unusual, but work perfectly if the PE contains relocations, as shown at http://pe.corkami.comImageBase and http://pe.corkami.comrelocatio...
Comodo Internet Ssecurity DoS
BSOD on PE execution if ImageBase points to kernel space...
CVE-2012-2273
Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service system crash via a crafted 32-bit Portable Executable PE file with a kernel ImageBase value...
CVE-2012-2273
CVE-2012-2273 affects Comodo Internet Security on Windows 7 x64 prior to 5.10.228257.2253. The vulnerability is a denial-of-service caused by how the product handles specially crafted 32-bit PE files with a kernel ImageBase value, leading to a system crash. Products listed in OpenVAS/NVD referenc...
PT-2012-3912
Name of the Vulnerable Software and Affected Versions Comodo Internet Security versions prior to 5.10.228257.2253 Description The issue allows local users to cause a system crash via a crafted 32-bit Portable Executable PE file with a kernel ImageBase value. This can lead to a denial of service...