5248 matches found
Microsoft SQL Server Master Data Services CVE-2014-1820 Cross Site Scripting Vulnerability
Description Microsoft SQL Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Technologie...
CountryTraceRoute v1.22 - Fast Traceroute with IP country information
CountryTraceRoute is a Traceroute utility, similar to the tracert tool of Windows, but with graphical user interface, and it's also much faster than tracert of Windows. CountryTraceRoute also displays the country of the owner of every IP address found in the Traceroute. After the Traceroute is...
Linux Kernel 3.2.0-23 (Ubuntu 12.04 x64) - ptracesysret Local Privilege Escalation
Linux Kernel 3.2.0-23 Ubuntu 12.04 x64 - ptracesysret Local Privilege Escalation / CVE-2014-4699 ptrace/sysret PoC by Vitaly Nikolenko [email protected] gcc -O2 pocv0.c This code is kernel specific. On Ubuntu 12.04.0 LTS 3.2.0-23-generic, the following will trigger the GP in sysret and overwrite...
Microsoft Security Advisory: Registry update to improve credentials protection and management for Windows-based systems that have the 2919355 update installed: July 8, 2014
None None...
Mozilla Firefox 29.0 - Null Pointer Dereference Vulnerability
No description provided by source. html titleMozilla Firefox Null Pointer Dereference Vulnerability/title pre Fun side of life! br Details: Title: Mozilla Firefox Null Pointer Dereference Vulnerability Version: Prior to 29.0 Date: 4/30/2014 Discovered By: Mr.XHat E-Mail: Mr.XHat AT GMail.com Test...
Adobe Reader 11.0.0 Stack Overflow Crash PoC
No description provided by source. Title : Adobe Reader 11.0.0 Stack overflow Version : 11.0.0.379 Date : 2012-11-01 Vendor : http://www.adobe.com/ Impact : Med Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows 7 X64 ENG Author : coolkaveh Bug : ---- Don't forget that...
Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
No description provided by source. / Exploit Title: Skype = 4.2.0.169 DLL Hijacking Exploit wab32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Skype v4.2.0.169 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .skype Greetz: Astalavista,...
Linux Kernel 2.6.34+ - CAP_SYS_ADMIN x86 & x64 Local Privilege Escalation Exploit (2)
No description provided by source. / Linux Kernel CAPSYSADMIN to Root Exploit 2 32 and 64-bit by Joe Sylve @jtsylve on twitter Released: Jan 7, 2011 Based on the bug found by Dan Rosenberg @djrbliss only loosly based on his exploit http://www.exploit-db.com/exploits/15916/ Usage: gcc -w...
Opera 12.15 vtable Corruption
No description provided by source. !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN html head title Opera 12.15 DOS POC/title /head body iframe id=wnd/iframe script type=text/javascript language=JavaScript / Title: Opera 12.15 vTable Corruption Author: echo Test: Windows 7 x64 Version:...
Adobe Premier Pro CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe Premier Pro CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v4.0.0 314 MC: 160820 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .pproj .prfpset...
Microsoft Windows Kernel Intel x64 SYSRET PoC
No description provided by source. Source: http://packetstormsecurity.org/files/115908/sysret.rar This is proof of concept code that demonstrates the Microsoft Windows kernel Intel/x64 SYSRET vulnerability as described in MS12-042. The shellcode disables code signing and will grant NT SYSTEM...
Linux kernel 3.14-rc1 <= 3.15-rc4 - Raw Mode PTY Local Echo Race Condition (x64) Local Privilege Escalation
No description provided by source. / CVE-2014-0196: Linux kernel = v3.15-rc4: raw mode PTY local echo race condition Slightly-less-than-POC privilege escalation exploit For kernels = v3.14-rc1 Matthew Daley [email protected] Usage: $ gcc cve-2014-0196-md.c -lutil -lpthread $ ./a.out + Resolving...
UTStats XSS, SQL Injection & Full path disclosure
No description provided by source. Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE : none Code : There are most...
Windows Task Scheduler Privilege Escalation 0day (CVE-2010-3338)
No description provided by source. Exploit Title: Windows Task Scheduler Privilege Escalation 0day Date: 20-11-2010 Author: webDEViL Tested on: Windows 7/2008 x86/x64 crctable = new Array 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3, 0x0EDB8832,...
GdiDrawStream BSoD using Safari
No description provided by source. Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil iframe height='18082563'/iframe ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050...
Aika 0.2 colladaconverter Xml Parsing Buffer Overflow
No description provided by source. / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...
NVidia Display Driver Service (Nsvr) Exploit
No description provided by source. / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - than...
Ubuntu 12.04.0-2LTS x64 perf_swevent_init - Kernel Local Root Exploit
No description provided by source. / Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko [email protected] based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 - 3.5.0-23-generic $ gcc vnik.c...
Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe On Location CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 Build 315 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .olproj Greetz: Astalavista,...
Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe InDesign CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v6.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .indl .indp .indt .inx Greetz: Astalavist...