Pacu - The AWS Exploitation Framework, Designed For Testing The Security Of Amazon Web Services Environments

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

MGASA-2018-0360 Updated virtualbox packages fix security vulnerabilities

This update provides the virtualbox 5.1.18 maintenance release that fixes at least the following security issues: Fixed an easily exploitable vulnerability that allowed unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

Microsoft Windows - CreateObjectTask TileUserBroker Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=439 Windows: CreateObjectTask TileUserBroker Elevation of Privilege Platform: Windows 8.1 Update I don’t believe it’s available in earlier Windows versions Class: Elevation of Privilege Summary: The CreateObjectTask...

CVE-2014-9621

The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string...

HomeFtp 1.1 (NLST) Denial of Service Vulnerability

No description provided by source. / HomeFtp v1.1 Denial of Service original advisory: http://kapda.ir/advisory-202.html homeftpv1.1xpl.c ---------------------------------------- / include stdio.h include sys/socket.h include sys/types.h include netinet/in.h include netdb.h define POCSTR "USER...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

FreeBSD 4.1.1 Finger Arbitrary File Access

Binary data 1281.prm...

elektropost episerver 34 - Multiple Vulnerabilities

elektropost episerver 34 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9223/info Multiple vulnerabilities were reported in EPIServer that include directory traversal, information disclosure, and denial of service. These issue result from insufficient sanitization of...

Kerio MailServer 5.6.3 - Remote Buffer Overflow

/ Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid authentication / / details, it is...

Microsoft UPnP NOTIFY Buffer Overflow Vulnerability

Description Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, it is available with Windows XP's Internet Connection Sharing client. It should be noted that UPnP...

SCO Open Server 5.0.6 - lpshut Buffer Overflow

SCO Open Server 5.0.6 - lpshut Buffer Overflow source: https://www.securityfocus.com/bid/2555/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpshut, a component used to shut down the L...