ActFax Server FTP Remote BOF (post auth) Bigger Buffer

Exploit for windows platform in category remote exploits...

GoldenFTP 4.70 PASS Stack Buffer Overflow

Exploit for windows platform in category remote exploits $Id: goldenftppassbof.rb 12812 2011-06-02 01:10:22Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

Critical Flash Player Update to fix 11 Security Holes

Critical Flash Player Update to fix 11 Security Holes Adobe has released another batch of security updates for its ubiquitous Flash Playersoftware. This "critical" patch fixes at least 11 vulnerabilities, including one that reports suggest is being exploited in targeted email attacks. In the...

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and...

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors...

Wireshark packet-dect.c Stack Buffer Overflow

This module exploits a stack buffer overflow in Wireshark 'Wireshark packet-dect.c Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in Wireshark MSFLICENSE, 'Author' = 'Paul Makowski', Initial discovery 'sickness', proof of concept 'corelanc0d3r ', rop explo...

Google Chrome 10.0.648.205之前版本存在多个安全漏洞

Bugtraq ID: 47377 CVE ID：CVE-2011-1300,CVE-2011-1301,CVE-2011-1302 Google Chrome是一款流行的WEB浏览器。 Google Chrome存在多个安全漏洞允许攻击者以应用程序权限执行任意指令。 CVE-2011-1300： CNCVE ID：CNCVE-20111300 CNCVE-20111300 GPU进程存在一个三字节触发错误，可能导致任意代码执行，此漏洞仅影响windows平台。 CVE-2011-1301： CNCVE ID：CNCVE-20111300 CNCVE-20111300...

ManageEngine Applications Manager Authenticated Code Execution

This module logs into the Manage Engine Applications Manager to upload a payload to the file system and a batch script that executes the payload. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

IBM Rational Licensing本地特权提升漏洞

Bugtraq ID: 47091 CVE ID：CVE-2011-1205 IBM Rational Licensing是一款用于多个IBM产品的许可证管理机制。 IBM Rational Licensing的windows平台实现基于Microsoft COM架构，证书功能通过不同的4个COM对象提供给部分IBM Rational程序使用。这些COM对象存在缓冲区溢出，攻击者可以利用漏洞，构建特制的HTML文件，诱使用户在Internet Explorer本地电脑安全域下打开，可导致以目标用户安全上下文执行代码。 0 IBM Rational Licensing 7.1.1.4 IB...

Mozilla Firefox Crash Handler

=============================================================================== 80 8o 8oO80oO8 080808 080808080 80o 08 8080080880 08 0o 08 8 08 8O O8 08o8 O0 0O 80 0o 8o 0 0 0o o0 80 Oo 08 O0 08o0o 08 8 8 8O O8 08 0o 80 88 80o0o 8Oo80O80 0 0 0oOoOoOo0 80 8o 80 o8o 08 0o 08O08oO8 8 8 8O80808O8 08 ...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

Foxit PDF Reader 4.2 Javascript File Write

This module exploits an unsafe Javascript API implemented in Foxit PDF Reader version 4.2. The createDataObject Javascript API function allows for writing arbitrary files to the file system. This issue was fixed in version 4.3.1.0218. Note: This exploit uses the All Users directory currently, whi...

Microsoft Windows Media Player DVR-MS File Code Execution

Added: 03/14/2011 CVE: CVE-2011-0042 BID: 46680 OSVDB: 71016 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A file parsing error in Windows Media Player allows command execution when a user opens a specially crafted Digital Video Recording DVR-MS...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

Exploit for windows platform in category remote exploits $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

UBUNTU-CVE-2011-0134

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2011-0126

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2011-0111

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2011-0133

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application...

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606...