Microsoft Word 2010 - Crash (PoC)

Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- StackOverflow during the handling ...

WordPress FireStorm Professional Real Estate Plugin - SQL Injection

This WordPress FireStorm Professional Real Estate plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin FireStorm Professional Real Estate 2.06.01 - SQL Injection

Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability Google Dork: inurl:"/fs-real-estate-plugin/xml/markerlistings.xml?id=" Exploit Author: Ashiyane Digital Security Team Software Link: http://www.firestormplugins.com/plugins/real-estate/ Category: Web...

Microsoft Windows Kernel 'Win32k.sys'整数溢出权限提升漏洞（MS12-068）

BUGTRAQ ID: 55793 CVECAN ID: CVE-2012-2529 Microsoft Windows是微软发布的非常流行的操作系统。 Windows Kernel不正确地处理了内存对象，存在权限提升漏洞，可导致在内核模式下运行任意代码。 0 Microsoft Windows 7 Microsoft Windows XP Professional Microsoft Windows XP Home Edition Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server...

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

Handshakes Professional 4.1 SQL Injection

HTTPCS Advisory : HTTPCS70 Product : Handshakes Professional Version : 4.1 Date : 2012-10-01 Criticality level : Highly Critical Description : A vulnerability has been discovered in Handshakes Professional, which can be exploited by malicious people to conduct SQL injection attacks. Input passed...

SAS70 Needs to Die

By Andrew Storms Let’s be clear, SAS70 should be sentenced to a quick and painful death in the bottom of a giant pit protected by 20-foot thick concrete walls where it should be buried forever, along-side other IT criminals such as Windows ME and IE6. While SAS70 has its place in financial...

'Elderwood' Crew, Tied to Google Aurora Attack, Targeting Defense, Energy, Finance Companies

UPDATE–The same team that attacked Google in the Aurora campaign in 2009 is still active and has been conducting a long-term campaign targeting defense contractors, financial services companies, energy companies, human rights organizations and government agencies using a seemingly inexhaustible...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5150

Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

Race condition

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5150

The vulnerability CVE-2010-5150 affects 3D EQSecure Professional Edition 4.2 on Windows XP. A race condition in the software allows local attackers to bypass kernel‑mode hook handlers and execute code that would ordinarily be blocked by a handler, via certain user‑space memory changes during hook...

CVE-2010-5155

CVE-2010-5155 concerns a race condition in Blink Professional 4.6.1 on Windows XP that allows local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution (an argument-switch or KHOBE attack). The vulnerability can enable execution of c...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1362 · 3D · 3D Eqsecure Professional Edition

Name of the Vulnerable Software and Affected Versions: 3D EQSecure Professional Edition version 4.2 Description: A race condition in the software allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...

PT-2012-1367 · Blink · Blink Professional

Name of the Vulnerable Software and Affected Versions: Blink Professional version 4.6.1 Description: A race condition in Blink Professional on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

CVE-2012-2590

CVE-2012-2590 affects ESCON SupportPortal Pro 3.0. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via an e-mail message body. Exploitation vectors include (1) a SCRIPT element, (2) crafted SRC on an IFRAME, (3) cra...

Morovia Barcode File Overwrite

Exploit Title: Morovia Barcode ActiveX Professional 3 File Overwrite Exploit Date: July 24, 2012 Author: coolkaveh [email protected] Https://twitter.com/coolkaveh Vendor Homepage:http://www.morovia.com/component/barcode-activex/ Version: 3.8.0 Tested on: windows 7 awesome coolkaveh...

Yahoo Patches Vulnerability that Led to 450,000-Password Breach

Yahoo announced today it’s fixed the security hole that allowed a hacker group this week to post some 450,000 email addresses and passwords belonging to freelance writers. “We have taken swift action and have now fixed this vulnerability, deployed additional security measures for affected Yahoo!...

Able2Doc and Able2Doc Professional 6.0 - Memory Corruption

Exploit Title: Able2Doc and Able2Doc Professional v 6.0 memory corruption Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.investintech.com Version:6.0 Tested on: Windows 7 CVE : cve-2011-4221 payload ="B"13000 crash="startxref" pdf=payload+crash filename =...