CVE-2012-5188

CVE-2012-5188 concerns mora Downloader before 1.0.0.1, where an untrusted search path can cause the launcher to execute a .exe via unspecified vectors. Multiple sources (NVD/Red Hat/JVN variants) confirm the flaw allows arbitrary code execution with the application’s privileges, tied to insecure ...

New Malware Can't Be Caught Napping

The aptly named Trojan Nap, a stealthy type of malware recently discovered by researchers at FireEye is able to evade detection methods by tricking scanners into thinking it’s asleep. This is according to researchers Abhishek Singh and Ali Islam with the California-based security firm who wrote o...

FreeSSHd 1.2.6 Authentication Bypass Vulnerability

This Metasploit module exploits a vulnerability found in FreeSSHd versions 1.2.6 and below to bypass authentication. You just need the username which defaults to root. The exploit has been tested with both password and public key authentication. require 'msf/core' require 'tempfile' class...

DIMIN Viewer 5.4.0 - GIF Decode Crash (PoC)

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23496.tar.gz CommandLine: "C:\Program Files\DIMIN\Viewer5\imgview5.exe" Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. Use .symfix to have the debugger choose a...

DIMIN Viewer 5.4.0 - GIF Decode Crash (PoC)

DIMIN Viewer 5.4.0 - GIF Decode Crash PoC PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/23496.tar.gz CommandLine: "C:\Program Files\DIMIN\Viewer5\imgview5.exe" Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. U...

Narcissus Image Configuration - Passthru (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Narcissus Image...

Microsoft Windows Help Program - WinHlp32.exe Crash (PoC)

Microsoft Windows Help Program - WinHlp32.exe Crash PoC !/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-24 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact :...

Microsoft Windows Help Program - 'WinHlp32.exe' Crash (PoC)

!/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-24 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested ...

Microsoft Windows Help Program Memory Corruption

!/usr/bin/perl Title : Microsoft Windows Help programWinHlp32.exememory corruption Version : 5.1.2600 Date : 2012-10-21 Vendor : http://www.microsoft.com Crash : http://img69.imageshack.us/img69/7652/helpview.jpg Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested ...

Microsoft Windows Help (WinHlp32.exe) memory corruption

The HLP file is Microsoft Help file documentation for the Windows operating system or Windows programs. The file contains documentation for the Windows operating system or Windows programs. Successful exploits can allow attackers to execute arbitrary code !/usr/bin/perl Title : Microsoft Windows...

ManageEngine Security Manager Plus 5.5 build 5505 - Remote SYSTEM SQL Injection (Metasploit)

ManageEngine Security Manager Plus 5.5 build 5505 - Remote SYSTEM SQL Injection Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...

CVE-2011-5158

Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on April 7, 2014

Medium Alert ID: 26690 First Published: 2012 August 20 19:55 GMT Last Updated: 2014 April 8 13:28 GMT Version: 78 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a money transfer receipt for the recipient. The email message...

Simple Web Server 2.2 rc2 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; Exploit Title: SimpleWebServer 2.2-rc2 - Remote Buffer Overflow Exploit Date: 19/07/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ Software Link: http://www.pmx.it/download/sws-2.2-rc2-i686.exe Version: 2....

Umbraco CMS Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Umbraco CMS Remote Command Execution'...

Open-FTPD 1.2 Arbitrary File Upload

This module exploits multiple vulnerabilities found in Open&Compact FTP server. The software contains an authentication bypass vulnerability and a arbitrary file upload vulnerability that allows a remote attacker to write arbitrary files to the file system as long as there is at least one user wh...

CVE-2012-1441

The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modified value in any of several e fields. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurr...

CVE-2012-1432

The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \57\69\6E\5A\69\70 character sequence at a certain...

CVE-2012-1435

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a...