Immunity Canvas: LINUX_PPPOL2TP

Name| linuxpppol2tp ---|--- CVE| CVE-2014-4943 Exploit Pack| CANVAS Description| pppol2tp local root Notes| Repeatability: Single Notes: Exploit for Linux = 3.4.x amd64 and = 3.7.x x86 Tested on + Ubuntu 13.04 / 13.10 / 14.04 x86/amd64 + Fedora 17 amd64 only + Fedora 18/19/20 x86/amd64 Note:...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

Immunity Canvas: MS14_040

Name| ms14040 ---|--- CVE| CVE-2014-1767 Exploit Pack| CANVAS Description| AFD.SYS dangling pointer vulnerability Notes| Repeatability: Infinite Notes: This vulnerability affects Microsoft Windows from XP to 8.1, although the exploit is not available for every version. This module automatically...

Opera Web Browser 9.26 - Multiple Security Vulnerabilities

source: http://www.securityfocus.com/bid/28585/info Opera Web Browser is prone to multiple security vulnerabilities that may allow remote attackers to execute code. These issues lead to memory corruption and may result in remote unauthorized access and denial-of-service attacks. Versions prior to...

Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005) (2)

No description provided by source. sploit creater by [email protected] ms06-005 advisory proof of concept heap overflow in wmf.dll @ 0x0035920a denial of service, cuz we can't get this to play nice shamelessly stolen from CANVAS code def intelorderi: str= a=chri % 256 i=i 8 b=chri % 256 i...

Opera Denial of Service by <canvas> Element

No description provided by source. Opera.html html body onload=Opera script language=JavaScript function Opera canvas = document.getElementByIdcanvas; ctx = canvas.getContext2d; ctx.getImageData0,0,0x20000,0x20000; /script canvas id=canvas width=10 height=10/canvas /body /html Original Advisory:...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0466-1)

Update to 19.0.1079 Security Fixes bnc754456 : - High CVE-2011-3050: Use-after-free with first-letter handling - High CVE-2011-3045: libpng integer issue from upstream - High CVE-2011-3051: Use-after-free in CSS cross-fade handling - High CVE-2011-3052: Memory corruption in WebGL canvas handling...

openSUSE Security Update : acroread (openSUSE-2012-33)

Acrobat Reader was updated to version 9.4.7 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-33. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : exim (openSUSE-SU-2010:1052-1)

remote attackers could trick exim into running arbitrary code CVE-2010-4344. A privilege escalation flaw allowed attackers to gain root access CVE-2010-4345. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : - MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards - MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library - MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access - MFSA...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

openSUSE Security Update : sudo (openSUSE-SU-2013:0495-1)

sudo was updated to fix two security issues, where adjusting the time of the syste could be used to regain access to sudo sessions if they onc were granted. CVE-2013-1775,CVE-2013-1776 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Immunity Canvas: LINUX_FUTEX_REQUEUE

Name| linuxfutexrequeue ---|--- CVE| CVE-2014-3153 Exploit Pack| CANVAS Description| Futex Requeue Privilege Escalation Exploit Notes| Repeatability: Multiple times Notes: - Supported 64bit kernels: 3.11.0-13-22-generic - Ubuntu saucy 13.10 3.11.0-13-22-generic - Ubuntu precise 12.04...

Immunity Canvas: MS14_025

Name| ms14025 ---|--- CVE| CVE-2014-1812 Exploit Pack| CANVAS Description| ms14025 Notes| CVE Name: CVE-2014-1812 VENDOR: Microsoft Commandline: runmodule ms14-025 References: https://technet.microsoft.com/library/security/ms14-025 CVE Url:...

Immunity Canvas: LINUX_TTY_RACE

Name| linuxttyrace ---|--- CVE| CVE-2014-0196 Exploit Pack| CANVAS Description| linuxttyrace local root Notes| Repeatability: Multiple Times Notes: Exploit has been tested successfully on: - Ubuntu 13.10 3.14.1-vanilla - Ubuntu 14.04 3.14.1-vanilla - Ubuntu 14.04 3.14.2-vanilla - Fedora 20...

CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

Out-of-bounds

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

UBUNTU-CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

Kvasir - Penetration Testing Data Management Tool

Penetration Testing Data Management can be a nightmware, because well you generate a LOT of data and some information when conducing a penetration test, especially using tools – they return lots of actual and potential vulnerabilitites to review. Port scanners can return thousands of ports for ju...