Ruby随机数字生成本地拒绝服务漏洞

BUGTRAQ ID: 49015 CVE ID: CVE-2011-2686 Ruby是一种功能强大的面向对象的脚本语言。 Ruby在处理随机数字生成的实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成拒绝服务。 Yukihiro Matsumoto Ruby 1.8.7 x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/ !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Serv...

Mozilla Firefox 3.6.16 mChannel Use After Free Exploit

require 'msf/core' class Metasploit3 HttpClients::FF, :uaminver = "3.6.16", :uamaxver = "3.6.16", :osname = OperatingSystems::WINDOWS, :javascript = true, :rank = NormalRanking, def initializeinfo = superupdateinfoinfo, 'Name' = 'Mozilla Firefox 3.6.16 mChannel use after free Exploit',...

Firefox 3.6.16 OBJECT mChannel Remote Code Execution (DEP bypass)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 HttpClients::FF, :uaminver = "3.6.16", :uamaxver = "3.6.16", :osname = OperatingSystems::WINDOWS, :javascript = true, :rank = NormalRanking, def initializeinfo = superupdateinfoinfo, 'Name' = 'Mozilla...

Freefloat FTP Server 1.0 Buffer Overflow

Freefloat FTP Server POST Auth Multiple Commands Buffer Overflow Vulnerabilities SecPod Technologies www.secpod.com Author: Veerendra G.G SecPod ID: 1019 19/07/2011 Issue Discovered 19/07/2011 Vendor Notified No Response From Vendor 04/08/2011 Advisory Released Class: Buffer Overflow Severity: Hi...

Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)

Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution DEP Bypass Metasploit require 'msf/core' class Metasploit3 HttpClients::FF, :uaminver = "3.6.16", :uamaxver = "3.6.16", :osname = OperatingSystems::WINDOWS, :javascript = true, :rank = NormalRanking, def initializeinfo =...

Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)

require 'msf/core' class Metasploit3 HttpClients::FF, :uaminver = "3.6.16", :uamaxver = "3.6.16", :osname = OperatingSystems::WINDOWS, :javascript = true, :rank = NormalRanking, def initializeinfo = superupdateinfoinfo, 'Name' = 'Mozilla Firefox 3.6.16 mChannel use after free Exploit',...

ABBS Audio Media Player 3.0 - Local Buffer Overflow (Metasploit)

ABBS Audio Media Player 3.0 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ABBS Audio Media Player 3.0 (LST File) Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ABBS Audio Media...

FreeAmp 2.0.7 .fat Buffer Overflow Exploit (MSF)

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

ABBS Electronic Flash Cards 2.1 (FCD File) Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ABBS Electronic...

FreeAmp 2.0.7 - .fat Local Buffer Overflow (Metasploit)

FreeAmp 2.0.7 - .fat Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

FreeAmp 2.0.7 - '.fat' Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Freeamp 2.0.7 FAT...

Omnicom Alpha 4.0e LPD Server Denial Of Service

!/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendor Notified 8/1/2011, Vendor Responded 8/2/2011,...

Zinf Audio Player 2.2.1 - .pls Local Buffer Overflow (DEP Bypass)

Zinf Audio Player 2.2.1 - .pls Local Buffer Overflow DEP Bypass !/usr/bin/ruby +Exploit Title: Zinf Audio Player v2.2.1 PLS File Buffer Overflow VulnerabilityDEP BYPASS +Date: 03\08\2011 +Author: C4SS!0 and h1ch4m +Found by: Delikonhttp://www.exploit-db.com/exploits/559/ or also...

Zinf Audio Player 2.2.1 - '.pls' Local Buffer Overflow (DEP Bypass)

!/usr/bin/ruby +Exploit Title: Zinf Audio Player v2.2.1 PLS File Buffer Overflow VulnerabilityDEP BYPASS +Date: 03\08\2011 +Author: C4SS!0 and h1ch4m +Found by: Delikonhttp://www.exploit-db.com/exploits/559/ or also Metasploithttp://www.exploit-db.com/exploits/16688 +Software Link:...

Actfax FTP Server <= v4.27 USER Command 0day Stack Buffer Overflow (MSF)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Actfax FTP Server 4.27 - 'USER' Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Actfax FTP Server...

Duba 2 0 1 2 KisKrnl.sys local kernel mode privilege escalation vulnerability-vulnerability warning-the black bar safety net

2011.7.8.913 Local Kernel Mode Privilege Escalation Exploit Kingsoft AntiVirus 2 0 1 2 KisKrnl.sys = 2011.7.8.913 Local Kernel Mode Privilege Escalation Exploit Date: 2011-7-23 Author : MJ0011 Version: Kingsoft AntiVirus 2 0 1 2 Tested on: Windows XP SP3 DETAILS: In KisKrnl.sys 's hook function o...

Concept Medya SQL Injection

Exploit Title: Concept Medya Admin Auth ByPass Date: 13 June 2011 Author: CriminalCoder Category: webapps Google dork: inurl:loginkontrol.asp Tested on: Windows Xp SP3 Home: spyroot.in & rootarea.com + Default admin panel : http://localhost/loginkontrol.asp + ByPass the admin auth by using Userna...

Apple Safari 5.0.5 - SVG Remote Code Execution (DEP Bypass)

Apple Safari 5.0.5 - SVG Remote Code Execution DEP Bypass Abysssec Public Advisory apple killed one of our 0day no point to keep it private anymore : there is another version of exploit using POPup and thats more reliable but as you know safari block pop up by default so we found a cool way to...