Ubuntu Drupal Theme - Brown images/layout/gradient.php File Disclosure

The version of the Ubuntu Drupal Theme - Brown installed on the Drupal install on the remote host does not properly sanitize user-supplied input to the 'start' and 'end' parameters of the 'images/layout/gradient.php' script before using it to return the contents of a file. A remote, unauthenticat...

SA-CONTRIB-2010-100 - Ubuntu Drupal Theme - Directory traversal and information disclosure

This Ubuntu Drupal Theme - Brown is designed to mimic the old ubuntu.com. The theme used a PHP file to generate a gradient image on the fly. User input from the URL is not properly validated in this PHP code, leading to a directory traversal vulnerability where the contents of any file readable b...

BACnet OPC Client - Local Buffer Overflow (1)

!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...

Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service

!/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS Platform: Novell Netware 6.5 SP8 Found by Francis Provencher for Protek Research Lab's http://protekresearch.blogspot.com/ PRL Novell Netware CIFS.nlm Remote Memory Consumption Denial of Service Here is a modified version fr...

Google Chrome 4.0.249.30 Denial Of Service

!/usr/bin/perl google chrome 4.0.249.30 DoS PoC Author: REMOVED AT REQUEST OF AUTHOR Info: In ordinary cases browser would redirect to "http://www.google.com" but in this case browser will report error for something that should be possible and is possible on other browsers. I would like to thank...

Mozilla Codesighs Memory Corruption PoC

No description provided by source. !/usr/bin/perl thedailyshow.pl AKA Mozilla Codesighs Memory Corruption PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.12.2009 257 while0 == retval && NULL != fgetslineBuffer, sizeoflineBuffer, inOptions-mInput gdb 259...

Mozilla Codesighs Memory Corruption

!/usr/bin/perl thedailyshow.pl AKA Mozilla Codesighs Memory Corruption PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.12.2009 257 while0 == retval && NULL != fgetslineBuffer, sizeoflineBuffer, inOptions-mInput gdb 259 trimWhitelineBuffer; gdb trimWhite...

Mozilla Codesighs Memory Corruption PoC

Exploit for unknown platform in category local exploits ======================================= Mozilla Codesighs Memory Corruption PoC ======================================= Title: Mozilla Codesighs Memory Corruption PoC CVE-ID: OSVDB-ID: Author: Jeremy Brown Published: 2009-12-12 Verified: yes...

Mozilla Codesighs - Memory Corruption

!/usr/bin/perl thedailyshow.pl AKA Mozilla Codesighs Memory Corruption PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.12.2009 257 while0 == retval && NULL != fgetslineBuffer, sizeoflineBuffer, inOptions-mInput gdb 259 trimWhitelineBuffer; gdb trimWhite...

gAlan 0.2.1 - Local Buffer Overflow (1)

gAlan 0.2.1 - Local Buffer Overflow 1 !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 "From Static Analysis to 0day Exploit" Originally a SecurityTubeCon Presentation, which I'm guessing was cancel...

gAlan 0.2.1 Buffer Overflow 0day Exploit

No description provided by source. !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 "From Static Analysis to 0day Exploit" Originally a SecurityTubeCon Presentation, which I'm guessing was canceled...

gAlan 0.2.1 Buffer Overflow 0day Exploit

Exploit for unknown platform in category local exploits ======================================== gAlan 0.2.1 Buffer Overflow 0day Exploit ======================================== Title: gAlan 0.2.1 Buffer Overflow 0day Exploit CVE-ID: OSVDB-ID: Author: Jeremy Brown Published: 2009-12-07 Verified:...

Polipo 1.0.4 Remote Memory Corruption 0day PoC

Exploit for unknown platform in category dos / poc ============================================== Polipo 1.0.4 Remote Memory Corruption 0day PoC ============================================== Title: Polipo 1.0.4 Remote Memory Corruption 0day PoC CVE-ID: OSVDB-ID: Author: Jeremy Brown Published:...

Eureka Mail Client 2.2q PoC BoF

Exploit for unknown platform in category dos / poc =============================== Eureka Mail Client 2.2q PoC BoF =============================== Title: Eureka Mail Client 2.2q PoC BoF CVE-ID: OSVDB-ID: Author: Francis Provencher Published: 2009-10-23 Verified: yes view source print? Application...

Ipswitch WS_FTP 12 Professional - Remote Format String (PoC)

Ipswitch WSFTP 12 Professional - Remote Format String PoC !/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII...

Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit

No description provided by source. / alwaysdirtyneverclean.c AKA Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit alwaysdirtyneverclean.zip BY Jeremy Brown 2009 [email protected] 07.21.2009 I've been up for nearly 24 hours only the last few doing research though. This exploit is base...

Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation

Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation / alwaysdirtyneverclean.c AKA Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit alwaysdirtyneverclean.zip BY Jeremy Brown 2009 [email protected] 07.21.2009 I've been up for nearly 24 hours only the last few doing research though. Th...

Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================== Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit ========================================================== / alwaysdirtyneverclean.c AKA Adobe Acrobat 9.1.2 NOS Local...

GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit BY Jeremy Brown [email protected] 05.07.2009 It seems I couldn't gather my resources quickly enough before the first exploit came out...

GrabIt 1.7.2x - NZB DTD Reference Buffer Overflow

!/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit BY Jeremy Brown [email protected] 05.07.2009 It seems I couldn't gather my resources quickly enough before the first exploit came out.. and it came as no surprise that i...