175 matches found
Crob FTP Server <= 3.6.1 - Remote Stack Overflow Exploit
No description provided by source. / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic [email protected] LSS Security / http://security.lss.hr / include stdio.h include windows.h include time.h pragma comment...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (8)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit (fveapi.dll)
No description provided by source. Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbca...
Sunbelt Kerio Personal Firewall 4.3.426 CreateRemoteThread Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call. Exploitation of this vulnerability could cause...
Agnitum Outpost Firewall 4.0 Outpost_IPC_HDR Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24284/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users. This issue affects Outpost Firewall 4....
Zeus Alternative Pandemiya Banking Malware For Sale in Underground Forums
A new and relatively rare Zeus Trojan program has found which is totally different from other banking Trojans and has capability to secretly steal data from forms, login credentials and files from the victim as well as can create fake web pages and take screenshots of victim's computer. Researche...
Cuckoo Sandbox v1.1 - Automated Malware Analysis
Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...
Uncover Adobe Reader Sandbox Exceptions
Since version 10 Adobe Reader has included a flavor of the Chrome sandbox. This technology is much better explained here, and in the 4 Adobe specific posts: part1, part2, part3 and part4. But in very few words it works dividing responsibilities in at least 2 processes; the broker and a target. Th...
Windows Gather Local Admin Search
This module will identify systems in a given range that the supplied domain user should migrate into a user pid has administrative access to by using the Windows API OpenSCManagerA to establishing a handle to the remote host. Additionally it can enumerate logged in users and group membership via...
Malware in your Mouse can act as RAT for Cyber Criminals
Recently we reported about that Symantec provide overview and analysis of the year in global threat activity via its Internet Security Threat Report ISTR, with a exclusive details that 400 million new variants of malware were created in 2011, which is an average of 33 million new variants of...
Windows Service Trusted Path Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...
Windows Service Trusted Path Privilege Escalation
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Microsoft Windows - Service Trusted Path Privilege Escalation (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...
ESTsoft ALYac Anti-Virus 1.5 <= 5.0.1.2 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called...
VLC Media Player < 1.1.5 Buffer Overflow
The version of VLC media player installed on the remote Windows host is earlier than 1.1.5. Such versions are vulnerable to a stack smashing attack in the Samba network share access module due to an error in the way VLC calls the Windows API function 'WNetAddConnection2A' when opening 'smb://'...
MySQl 5.1 DLL Hijacking Exploit (lPK.dll)
No description provided by source. ========================================= MySQl 5.1 DLL Hijacking Exploit lPK.dll ========================================= / Exploit Title: MySQl 5.1 DLL Hijacking Exploit lPK.dll Date: Octobre 6, 2010 Author: Mu$lim [email protected] Version: 5.1 Tested on:...
Adobe Dreamweaver CS4 DLL Hijacking Exploit
/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...
Cisco Packet Tracer 5.2 DLL Hijacking Exploit (wintab32.dll)
Exploit for windows platform in category local exploits ============================================================ Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll ============================================================ / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit...
Opera 10.61 - dwmapi.dll DLL Hijacking
Opera 10.61 - dwmapi.dll DLL Hijacking / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtm...