Safari 5.0.5 SVG Remote Code Execution Exploit (DEP bypass)

No description provided by source. Abysssec Public Advisory apple killed one of our 0day no point to keep it private anymore : there is another version of exploit using POPup and thats more reliable but as you know safari block pop up by default so we found a cool way to bypass it and stand alone...

Apple Safari 5.0.5 - SVG Remote Code Execution (DEP Bypass)

Apple Safari 5.0.5 - SVG Remote Code Execution DEP Bypass Abysssec Public Advisory apple killed one of our 0day no point to keep it private anymore : there is another version of exploit using POPup and thats more reliable but as you know safari block pop up by default so we found a cool way to...

Apple Safari 5.0.5 - SVG Remote Code Execution (DEP Bypass)

Abysssec Public Advisory apple killed one of our 0day no point to keep it private anymore : there is another version of exploit using POPup and thats more reliable but as you know safari block pop up by default so we found a cool way to bypass it and stand alone module . this exploiting using ROP...

GDI+ - gdiplus.dll CreateDashedPath Integer Overflow

GDI+ - gdiplus.dll CreateDashedPath Integer Overflow Abysssec Research 1 Advisory information Title : GDI+ CreateDashedPath Integer overflow in gdiplus.dll Discovery : Nicolas july from vupen Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : High Contact : info at abysssec.com...

MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit

No description provided by source. Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j at gmail Version: MS Office = 2010 Tested on: MS Office 2010 14.0.4734.1000 - Windows 7 CVE : CVE-2010-3333 This is the exploit I wrote for...

Microsoft Office 2010 - '.RTF' Header Stack Overflow

Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: MS Office unfortunately msgr3en.dll loads a few seconds after opining office, so just need to open open Office , and then open exploit after a few second and saw a...

Mozilla Firefox - nsTreeRange Dangling Pointer (2)

Mozilla Firefox - nsTreeRange Dangling Pointer 2 Advisory : Abysssec Public Exploit : This module exploits a code execution vulnerability in Mozilla Firefox = 3.6.16 caused by nsTreeSelection element. The specific flaw exists within the way Firefox handles user defined functions of a...

Avaya WinPMD UniteHostRouter Buffer Overflow

This module exploits a stack buffer overflow in Avaya WinPMD. The vulnerability exists in the UniteHostRouter service, due to the insecure usage of memcpy when parsing specially crafted "To:" headers. The module has been tested successfully on Avaya WinPMD 3.8.2 over Windows XP SP3 and Windows 20...

Adobe Shockwave Player - rcsL Memory Corruption (Metasploit)

$Id: adobeshockwavercslcorruption.rb 10784 2010-10-22 12:21:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Shockwave Player - 'rcsL chunk' Memory Corruption

Abysssec Inc Public Advisory 1 Advisory information Title : Adobe Shockwave player rcsL chunk memory corruption Version : Adobe Shockwave player 11.5.8.612 latest on writing time Discovery : http://www.abysssec.com Vendor : http://www.adobe.com Impact : Critical Contact : shahin at abysssec.com ,...

Month Of Abysssec Undisclosed Bugs - ASPMass Shopping Cart

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass Shopping Cart Vulnerability File...

Month Of Abysssec Undisclosed Bugs - Microsoft Unicode Scripts Processor

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...

Microsoft Unicode Scripts Processor Remote Code Execution

Exploit for windows platform in category dos / poc ========================================================= Microsoft Unicode Scripts Processor Remote Code Execution ========================================================= Title : Microsoft Unicode Scripts Processor Remote Code Execution Versio...

Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)

Microsoft Unicode Scripts Processor - Remote Code Execution MS10-063 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version :...

Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...

Month Of Abysssec Undisclosed Bugs - AtomatiCMS

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : AtomatiCMS Upload arbitrary file Vulnerability Affected Version : AtomatiCMS 10all Discovery : www.abysssec.com Vendor :...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

Microsoft Excel - SxView Record Parsing Heap Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel...

Month Of Abysssec Undisclosed Bugs - Zen Photo Image Gallery 1.3

body font-family:tahoma;font-size:14px "; echo "Zen Photo Image Gallery 1.3 Reset admin Password By : Abysssec @ Inc www.Abysssec.com After click on below , if target will can connect to your MysqlHost : You Must view 'GO...

Month Of Abysssec Undisclosed Bugs - Nickel And Dime CMS 0.4rc1

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-27-ndcms-sql-injection-vulnerability/ ''' Abysssec Inc Public Advisory Title : ndCMS Sql Injection Vulnerability Affected Version : ndCMSNickel...