555 matches found
Adobe Reader - util.printf() JavaScript Function Stack Overflow Exploit (2)
No description provided by source. Adobe Reader Javascript Printf Buffer Overflow Exploit =========================================================== Reference: http://www.coresecurity.com/content/adobe-reader-buffer-overflow CVE-2008-2992 Thanks to coresecurity for the technical background...
WinZip <= 10.0.7245 - FileView ActiveX Buffer Overflow Exploit (2)
No description provided by source. !-- prdelka http://blogs.23.nu/prdelka I made a version of my winzip exploit that utilises the heap spray method with a bindshell for some project or other. you can download a copy here if its of use to you, note i used a different method courtesy of...
Adobe Flash Player "newfunction" Invalid Pointer Use
No description provided by source. $Id: adobeflashplayernewfunction.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution
No description provided by source. Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and...
Internet Explorer Style getElementsByTagName Memory Corruption
No description provided by source. $Id: ms09072styleobject.rb 9787 2010-07-12 02:51:50Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0day
No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language=JavaScript defer var sCode =...
Adobe Flash Player "Button" Remote Code Execution
No description provided by source. $Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
RSP MP3 Player OCX ActiveX Buffer Overflow (heap spray)
No description provided by source. html br/br br. . . \ / /br br|/| . | /br br| | ||/ \ /br br .| /br br/br brRSP MP3 Player OCX ActiveX Buffer Overflow heap spray/br brBy : MadjiX , Dz8aHotmail.com/br brDiscovered by Blake: http://www.exploit-db.com/exploits/14309/ brGreetings: His0k4 , Bibi-inf...
NVR SP2 2.0 (nvUnifiedControl.dll 1.1.45.0) - SetText() Remote Exploit
No description provided by source. ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 SetText Remote BoF Heap Spray Technique url: http://www.acti.com/index.asp author:...
Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)
No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...
SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass
No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...
AoA Audio Extractor Remote ActiveX SEH JIT Spray Exploit (ASLR+DEP Bypass)
No description provided by source. Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. http://www.exploit-db.com/sploits/DrIDE-AoA-JIT.rar...
Adobe - JBIG2Decode Memory Corruption Exploit
No description provided by source. $Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Barcodewiz 3.29 - Barcode ActiveX Control Remote Heap Spray Exploit (IE6/IE7)
No description provided by source. !-- Title: Barcodewiz 3.29 ActiveX Heap Spray Exploit Coded By: DrIDE Found By: loneferret Tested: Windows XP SP3 on IE6 + IE7 Date: July, 30 2010 -- html object classid='clsid:CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6' id='target'/object script language='javascript'...
MS12-037 Internet Explorer Same ID Property Deleted Object Handling Memory Corruption
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Internet Explorer createTextRange() Code Execution
No description provided by source. $Id: ms06013createtextrange.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Flash Zero Day Used to Target Victims in Syria
A couple days after Microsoft warned users about a new vulnerability in Internet Explorer that’s being used in targeted attacks, Adobe on Monday said that researchers have discovered a zero day in Flash, as well, which attackers are using to target victims in Syria through a watering hole attack ...
CVE2014-0 3 2 2 0Day Exploit analysis-exploit warning-the black bar safety net
Recently there was an IE 0day CVE-2 0 1 4-0 3 2 2is used to hang horse。 Although the vulnerability itself exists in IE,but in order to achieve success use,this sample also borrow a flash as an auxiliary,to break through the various protection. IE+flash combination also gives the analysis poses so...
Complete Microsoft EMET Bypass Developed
SAN FRANCISCO — Researchers at Bromium Labs are expected to announce today they have developed an exploit that bypasses all of the mitigations in Microsoft’s Enhanced Mitigation Experience Toolkit EMET. Principal security researcher Jared DeMott is scheduled to deliver a presentation this morning...
ASLR bypass techniques are popular with APT attacks
Address space layout randomization ASLR is a security technique involved in protection from buffer overflow attacks. Many recent APT Advanced Persistent Threat attacks have utilized many different ASLR bypass techniques during the past year, according to Researchers at FireEye. Many exploits and...