4592 matches found
HP OmniInet.exe Opcode 20 Buffer Overflow
This module exploits a vulnerability found in HP Data Protector's OmniInet process. By supplying a long string of data as the file path with opcode '20', a buffer overflow can occur when this data is being written on the stack where no proper bounds checking is done beforehand, which results...
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit
No description provided by source. Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j at gmail Version: MS Office = 2010 Tested on: MS Office 2010 14.0.4734.1000 - Windows 7 CVE : CVE-2010-3333 This is the exploit I wrote for...
HP OmniInet.exe Opcode 20 Buffer Overflow
$Id: hpomniinet4.rb 13092 2011-07-04 17:02:40Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
HP OmniInet.exe Opcode 20 - Remote Buffer Overflow (Metasploit)
$Id: hpomniinet4.rb 13096 2011-07-04 22:33:47Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploity Exploit
Exploit for windows platform in category local exploits Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: MS Office unfortunately msgr3en.dll loads a few seconds after opining office, so just need to open open...
Adobe Reader X 10.0.0 10.0.1 - Atom Type Confusion
Adobe Reader X 10.0.0 10.0.1 - Atom Type Confusion Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: Adobe Reader X It work reliably on IE9/FF4 and other browsers. The Arashi : http://abysssec.com/files/TheArashi.pdf...
Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion
Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: Adobe Reader X It work reliably on IE9/FF4 and other browsers. The Arashi : http://abysssec.com/files/TheArashi.pdf http://www.exploit-db.com/docs/17469.pdf me :...
Microsoft Office 2010 - '.RTF' Header Stack Overflow
Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: MS Office unfortunately msgr3en.dll loads a few seconds after opining office, so just need to open open Office , and then open exploit after a few second and saw a...
Mozilla Firefox - nsTreeRange Dangling Pointer (2)
Mozilla Firefox - nsTreeRange Dangling Pointer 2 Advisory : Abysssec Public Exploit : This module exploits a code execution vulnerability in Mozilla Firefox = 3.6.16 caused by nsTreeSelection element. The specific flaw exists within the way Firefox handles user defined functions of a...
Mozilla Firefox - 'nsTreeRange' Dangling Pointer (2)
Advisory : Abysssec Public Exploit : This module exploits a code execution vulnerability in Mozilla Firefox = 3.6.16 caused by nsTreeSelection element. The specific flaw exists within the way Firefox handles user defined functions of a nsTreeSelection element. When executing the function...
ZDI-11-198: (Pwn2Own) Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability
ZDI-11-198: Pwn2Own Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-198 June 14, 2011 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer --...
DSA-2264-1 linux-2.6 - several issues
Bulletin has no description...
Metasploit Launches Reward Program For Exploits
The team behind the Metasploit Project is launching its own version of a bug bounty program: cash payouts for working exploits. The group is hoping to get explit code for as many of its top 30 vulnerabilities as possible before the program expires later this summer. Metasploit has put together a...
(Pwn2Own) Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability
This vulnerability allows remote attackers to leak information on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Internet Explorer th...
KMPlayer 3.0.0.1440 Buffer Overflow
!/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html Tested On...
The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow (Win7+ASLR bypass mod)
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link:...
The KMPlayer 3.0.0.1440 (Windows 7) - .mp3 Local Buffer Overflow (ASLR Bypass)
The KMPlayer 3.0.0.1440 Windows 7 - .mp3 Local Buffer Overflow ASLR Bypass !/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link...
The KMPlayer 3.0.0.1440 (Windows 7) - '.mp3' Local Buffer Overflow (ASLR Bypass)
!/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html Tested On...
Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers
Overview Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description Autonomy Keyview IDOL is a set of libraries that can decode over 1,000 different file formats. The...
kernel security update
CentOS Errata and Security Advisory CESA-2011:0833 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...