Microsoft Windows ClickOnce Application Installer Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a malformed file. Successful exploits can allow attackers to execute arbitrary code within the privileges of the user running the...

Apple Safari - GdiDrawStream Blue Screen of Death

Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258 0000000000000001 fffff88008b510e0 : nt!KeBugCheckEx...

Apple Safari - GdiDrawStream Blue Screen of Death

Apple Safari - GdiDrawStream Blue Screen of Death Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258...

phpBB MyPage Plugin - SQL Injection

phpBB MyPage Plugin - SQL Injection ==================================================== MyPage plugin phpBB SQL Injection All versions ==================================================== ==================================================== Improve your hacking knowledges !...

Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64

Document Title: =============== Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=183 Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 1...

Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64

Document Title: =============== Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=183 Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 1...

VSS: Guest operation system is not supported.

Challenge The following error occurs: "VSS: Guest operation system is not supported." The log file contains the following messages: timestamp Info Collecting guest metrics. timestamp Info servertype: 0x1007 timestamp Info Target host is a workstation. timestamp Info Guest OS version: 5.2 timestam...

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...

Aika 0.2 Buffer Overflow

/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow

/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...

winAUTOPWN v2.7 – Windows Autohacking Tool

winAUTOPWN v2.7 – Windows Autohacking Tool This version covers almost all remote exploits up-till mid-July 2011 and a few older ones as well. This version incorporates a few new commandline parameters: -perlrevshURL for a PERL Reverse Shell URL, – mailFROM smtpsender and -mailTO smtpreceiver. The...

Microsoft Windows DNS Server Uninitialized Memory Remote Denial of Service Vulnerability

Description The Microsoft Windows DNS Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the DNS server service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition...

Microsoft Windows Data Access Component DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to an arbitrary-code-execution vulnerability that affects the Data Access Component. Attackers can exploit this vulnerability to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya Aura Conferenci...

OSX - Universal ROP shellcode

OSX - Universal ROP shellcode. Shellcode exploit for osx platform ; universal OSX dyld ROP shellcode ; tested on OS X 10.6.8 ; ; if you don't want to compile, copy stage0 code from precompiled.txt ; and append your normal shellcode to it. ; ; usage: ; - put your 'normal' shellcode in...

Microsoft Bluetooth Stack Remote Code Execution Vulnerability (2566220)

This host is missing a critical security update according to Microsoft Bulletin MS11-053. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

TigerVNC Detection (Windows SMB Login)

Detects the installed version of TigerVNC. The script logs in via smb, searches for TigerVNC in the registry and gets the version from registry. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

KMPlayer 3.0.0.1440 Buffer Overflow

!/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html Tested On...

PHP Detection (Windows SMB Login)

SMB login and Powershell file search based detection of PHP. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZeroAccess Rootkit Latest in Line of x64 Malware to Appear

Never ones to be left behind as progress marches on, attackers are beginning to develop more and more tools aimed specifically at exploiting 64-bit machines. The latest entry into the field is an x64 version of the ZeroAccess rootkit, a nasty piece of malware that’s been circulating for some time...