245 matches found
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2881
I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2881...
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868
I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2868...
IDA Pro Denial Of Service
Denial-of-Service Vulnerability in IDA Pro ------------------------------------------ June 28th, 2010 ======= Summary ======= Name: Denial-of-Service Vulnerability in IDA Pro Release Date: June 28th, 2010 Discoverer: Jason Geffner Version Affected: IDA Pro 3.76 through 5.6 Risk: Low Status:...
Solaris/x86 - Halt shellcode - 36 bytes
Solaris/x86 - Halt shellcode - 36 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Halt shellcode - 36 bytes Auhtor: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan Date: 2010-05-20 Tested: SunOS opensolaris 5.11 snv111b i86pc i386...
IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)
IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor url:http://www.incredimail.com/english/splash.aspx Tested on windows XP SP3 1-03-2010 Debugging info -------------- Exception Code: ACCESSVIOLATION Disasm: 678914AE MOV EDX,ECX ImSpoolU.dll Seh Chain:...
IncrediMail 2.0 ActiveX (Authenticate) bof PoC
Exploit for windows platform in category dos / poc ============================================== IncrediMail 2.0 ActiveX Authenticate bof PoC ============================================== IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor...
Winamp 5.551 MAKI Parsing Integer Overflow Exploit
No description provided by source. / Winamp 5.551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :http://www.winamp.com/ Version Tested:Winamp 5.551 Not vulnerable :Winamp 5.552 Credits to Monica Sojeong Hong down at...
Winamp 5.551 MAKI Parsing Integer Overflow Exploit
Exploit for unknown platform in category local exploits ================================================== Winamp 5.551 MAKI Parsing Integer Overflow Exploit ================================================== / Winamp 5.551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3...
Winamp 5.551 - MAKI Parsing Integer Overflow
Winamp 5.551 - MAKI Parsing Integer Overflow / Winamp 5.551 MAKI Parsing Integer Overflow Exploit !!! Tested on :Vista sp1 and Xpsp3 Release Date :May 22 2009 Venders web site :http://www.winamp.com/ Version Tested:Winamp 5.551 Not vulnerable :Winamp 5.552 Credits to Monica Sojeong Hong down at...
Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes
No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...
Linux x86 PUSH reboot()
No description provided by source. / Linux x86 PUSH reboot - 30 bytes Jonathan Salwan js.rac.projetATgmail.com Web: http://racprojet.zapto.org Disassembly of section .text: 08048054 .text: 8048054: 31 c0 xor %eax,%eax 8048056: 50 push %eax 8048057: 68 62 6f 6f 74 push $0x746f6f62 804805c: 68 6e 2...
linux/x86 PUSH reboot() - 30 bytes
Exploit for linux/x86 platform in category shellcode ================================== linux/x86 PUSH reboot - 30 bytes ================================== / Linux x86 PUSH reboot - 30 bytes Jonathan Salwan Web: http://racprojet.zapto.org Disassembly of section .text: 08048054 : 8048054: 31 c0 xo...
MS07-0 6 5 Message Queuing Service RPC remote overflow analysis-vulnerability warning-the black bar safety net
Author: axis Date: 2007-12-17 Team: http://www.ph4nt0m.org Microsoft's patch link http://www.microsoft.com/technet/security/bulletin/ms07-065.mspx According to ZDI vulnerability description: The specific flaw exists in the RPC interface defined on port 2 to 1 0 3 with UUID...
Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bViewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow/b...
Exploit for eTrust Antivirus Agent r8
No description provided by source. / ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions :...
eTrust AntiVirus Agent r8 - Local Privilege Escalation
eTrust AntiVirus Agent r8 - Local Privilege Escalation / ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I hav...
eTrust AntiVirus Agent r8 - Local Privilege Escalation
/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...
CA (Multiple Products) - Console Server InoCore.dll Remote Code Execution
CA Multiple Products - Console Server InoCore.dll Remote Code Execution // source: https://www.securityfocus.com/bid/23906/info Multiple products by Computer Associates are prone to multiple vulnerabilities that will allow remote attackers to execute arbitrary code on an affected computer...
Rookie magic bis in the PE file gap write code-vulnerability warning-the black bar safety net
It is also a series of second, the interval time is relatively long. 1. Don't know how many people remember or have seen rookie magic one,mentioned inside of SOFTICE and PE files phase Off of little knowledge,and the PE file structure,you continue to see this are helpful 2. If you're even a rooki...
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes
No description provided by source. / execve shellcode with 'fuck up disasm' ability, 32 bytes long by BaCkSpAcE sinisa86atgmaildotcom BitByterz Labs 2006 http://www.bitbyterz.org ; ; shellcode.asm ; fupdisasm: db 0x68 ; opcode for PUSH DW instruction db 0xcd ; crypt+1, opcode for INT instruction ...