5604 matches found
VLC MMS Stream Handling Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability
No description provided by source. //source: http://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address space, they're limited to...
MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...
The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit (Win7 + ASLR bypass mod)
No description provided by source. !/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec xsploitedsecurityatgmaildotcom Win7 + ASLR mod Software Link:...
Kaillera Multiple Clients Buffer Overflow Vulnerabilities
No description provided by source. !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13:...
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
No description provided by source. Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is...
IE Time Element Memory Corruption Exploit (MS11-050)
No description provided by source. Vuln Title: Internet Explorer Remote Code Execution Exploit DEP and ASLR Bypass Author: FaryadR a.k.a Ciph3r tested on : win 7 and IE 8 DEP and ASLR Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com Vendor :...
Adrenalin Player 2.2.5.3 - (.m3u file) SEH Buffer Overflow ASLR+DEP Bypass
No description provided by source. !/usr/bin env ruby Exploit Title: Adrenalin Player 2.2.5.3 .m3u SEH-Buffer Overflow ASLR+DEP Bypass Date: 3/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Software Link:...
BlazeVideo HDTV Player 6.6 Professional - SEH&DEP&ASLR
No description provided by source. !/usr/bin/python -w ----------------------------------------------------------------------------------- Exploit: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR Author: b33f - http://www.fuzzysecurity.com/ OS: Tested on Windows 7 32-bit PRO SP1 Software Lin...
Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)
No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...
CoolPlayer Portable 2.19.2 - Buffer Overflow (ASLR Bypass)
No description provided by source. Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print \n===================================== print CoolPlayer...
CVE-2014-1372: Undefined Security Weakness
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...
CVE-2014-1375: Undefined Security Weakness
Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
IBM Personal Communications I-Series Access WorkStation 5.9 Profile
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
IBM Lotus QuickR qp2 ActiveX Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
CoolPlayer Portable 2.19.2 - Buffer Overflow ASLR bypass
No description provided by source. Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake patched by pole Originally found by Securityxxxpert print \n=====================================...
Photodex ProShow Producer 5.0.3310 - Local Buffer Overflow (SEH)
No description provided by source. !/usr/bin/perl Exploit Title: Photodex ProShow Producer v5.0.3310 - Local Buffer Overflow SEH Date: 10-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Photodex ProShow Producer v5.0.3310 Software Link:...
Adobe Reader X Atom Type Confusion Vulnerability Exploit
No description provided by source. Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j at gmail Version: Adobe Reader X 10.1 Tested on: 10.0.0 - 10.0.1 - Windows 7 - IE/FF/Opera CVE : CVE-2011-0611 This is the exploit I wrote for Abysss...
MJM QuickPlayer 1.00 beta 60a / QuickPlayer 2010 .s3m Stack Buffer Overflow
No description provided by source. $Id: mjmquickplayers3m.rb 12474 2011-04-30 02:37:14Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
PT-2014-4154
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.4 Description The issue allows local users to bypass the Address Space Layout Randomization ASLR protection mechanism. This is achieved by leveraging read access to a kernel pointer in an IOKit object, which i...