AOL Search Reflected File Download

Oren Hafif reported a new kind of attack called Reflected File Download https://www.blackhat.com/eu-14/briefings.htmlreflected-file-download-a-new-web-attack-vector in Black Hat Europe 2014 conference. More details about the attack you can found in his public presentation:...

AOL Advertising Network Abused to Distribute Malware

Security researchers have uncovered a malvertising campaign used to distribute malware to visitors of The Huffington Post website, as well as several other sites, through malicious advertisements served over the AOL advertising network. At the end of last year, Cyphort Labs, security firm...

Malvertising Campaign Hits AOL Ad Network, Leads to Exploit Kit

Researchers have detected a malvertising campaign running on a pair of sites owned by Huffington Post that is using ads distributed through an AOL ad network. The attack is sending victims through a series of redirects that eventually brings them to a landing page that is running an exploit kit...

AOL-Desktop-9.6-(.rtx)

NOTE: If exploit doesn't work turn AOL off CTRL+ALT+DELETE and turn all AOL processes off then try again Watch out for other bad chars !! Current bad chars: \x00\x0a\x0d\x20\x31\x90\x3e First Header hd1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a"...

AOL-9.5-(rtx)-Local-Buffer-Overflow

Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41" "\x4d\x49\x4c\x59\x3d\x22\x53\x41\x4e\x53\x53\x45\x52\x49\x46\x22"...

AOL Releases Transparency Report Lobbies for USA FREEDOM Act

Noting that Saturday was the 13th anniversary of the passage of the USA PATRIOT Act, the Web giant AOL this week released its latest transparency report, detailing estimations of how many Foreign Intelligence Surveillance Act FISA orders and National Security Letters NSLs it’s received in the las...

Malicious Ads on Yahoo, AOL, Trigger CryptoWall Infections

Attackers have been leveraging the FlashPack Exploit Kit to peddle the CryptoWall 2.0 ransomware on unsuspecting visitors to sites such as Yahoo, The Atlantic and AOL. Researchers believe that for about a month the malvertising campaign hit up to 3 million visitors and netted the attackers $25,00...

AOL 9.5 Phobos.Playlist Import() Stack-based 缓冲区溢出漏洞

No description provided by source...

AOL Desktop 9.6 RTX 缓冲区溢出漏洞

No description provided by source...

AOL MAIL Cloud Service Detection

Binary data 8420.prm...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

No description provided by source. $Id: aolampxconvertfile.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

AIM Triton 1.0.4 CSeq Buffer Overflow

No description provided by source. $Id: aimtritoncseq.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

AOL Instant Messenger 4.x Unauthorized Actions Vulnerability

0 0 0 0 source: http://www.securityfocus.com/bid/5246/info The AOL Instant Messenger client is prone to an issue which may allow maliciously crafted HTML to perform unauthorized actions such as adding entries to the buddy list on behalf of the user of a vulnerable client. This condition is due to...

AOL 9.5 ActiveX 0day Exploit (heap spray)

No description provided by source. html head titleAOL 9.5 ActiveX 0day Exploit heap spray /title br+ AOL 9.5 ActiveX 0day Exploit heap spray/br br+ Author : Dzattacker/br br+ Discovered by: Hellcode Research http://www.hellcode.net br+ Reference: http://www.exploit-db.com/exploits/11190 br+ Teste...

AOL Instant Messenger 4.x/5.x Buddy Icon Predictable File Location Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to...

AOL Desktop 9.6 - (.rtx) Buffer Overflow

No description provided by source. !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If...

AOL Instant Messenger AIM "Away" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

AOL Instant Messenger 4.x Hyperlink Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatted hyper-link to a use...

AOL Desktop 9.6 RTX Buffer Overflow

No description provided by source. $Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

AOL 9.5 ActiveX Heap Overflow Vulnerability

No description provided by source. Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control CDDBControl.dll Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code...