CoolPlayer Portable 2.19.2 Buffer Overflow (ASLR Bypass)

Exploit for windows platform in category local exploits Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print...

DVD X Player 5.5.0 Professional Standard - .plf File Universal (ASLR + DEP Bypass)

DVD X Player 5.5.0 Professional Standard - .plf File Universal ASLR + DEP Bypass // Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ //...

DVD X Player 5.5.0 Professional / Standard - '.plf' File Universal (ASLR + DEP Bypass)

// Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ // ----------------------------------------------------------- // Exploit Title: DVD X Player 5.5 Professional .plf Universal DEP +...

DVD X Player 5.5.0 Pro / Standard Buffer Overflow

// Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ // ----------------------------------------------------------- // Exploit Title: DVD X Player 5.5 Professional .plf Universal DEP +...

DVD X Player 5.5.0 Pro / Standard Universal Exploit, DEP+ASLR Bypass

Exploit for windows platform in category local exploits // Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ // ----------------------------------------------------------- // Exploit...

Microsoft Windows DNS Server NAPTR查询远程代码执行漏洞

Bugtraq ID: 49012 CVE ID：CVE-2011-1966 Microsoft Windows是一款流行的操作系统。 Windows DNS server处理NAPTR Name Authority Pointer资源记录的查询存在错误，允许攻击者对设置为非权威DNS服务器进行任意代码执行攻击。...

CentOS Update for kernel CESA-2011:0833 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2011:0833 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2011:0833 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Apple Revamps Security in OS X Lion

Apple has released the newest version of its OS X operating system, dubbed Lion, and it includes a batch of new security protections that bring it up to the level of Windows and Internet Explorer. The most significant additions, experts say, is the full implementation of ASLR and a sandbox that...

Code injection

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

CVE-2011-0726

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

CVE-2011-0726

The CVE-2011-0726 entry is supported by connected advisories describing a Linux kernel vulnerability in do_task_stat (fs/proc/array.c) present in kernels before 2.6.39-rc1. The flaw allows local users to defeat ASLR by reading start_code/end_code from /proc/[pid]/stat for PIE processes, implying ...

CVE-2011-0726

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability

No description provided by source. $Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability

$Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability

Exploit for windows platform in category remote exploits $Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

Mozilla Firefox - 'nsTreeRange' Dangling Pointer (Metasploit) (1)

$Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

New iOS Jail Break Stokes Fears of Drive By Attacks

The clock is ticking for Apple to issue a patch for the iOS operating system that powers iPhones, iPods and iPads following the release of a remote exploit that uses specially crafted PDF files to defeat iOS’s content protection mechanisms and “jailbreak” mobile devices like the iPhone and iPad...

New iPhone Jailbreak Makes Short Work of World's 'Most Secure' OS

It wasn’t long ago – just a month in fact – that Apple’s iOS mobile operating system was being called the ‘Most secure’ OS. Period.’ A few weeks later, and the security of that OS has fallen again to the talents of Comex, an as-yet-unnamed mobile device hacker whose work is attracting kudos from...

HP OmniInet.exe Opcode 20 Buffer Overflow

Exploit for windows platform in category remote exploits $Id: hpomniinet4.rb 13096 2011-07-04 22:33:47Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...