IcoFX Stack Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'IcoFX Stack Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in version 2.1 of...

OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact A...

Microsoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability

Exploit for windows platform in category remote exploits require 'msf/core' require 'rex/zip' require 'nokogiri' module ::Nokogiri module XML class Builder Some XML documents don't declare the namespace before referencing, but Nokogiri requires one. So here's our hack to get around that by adding...

Microsoft - Tagged Image File Format '.TIFF' Integer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'nokogiri' module ::Nokogiri module XML class Builder Some XML documents don't declare the namespace before referencing, but...

OSX Screen Capture

This module takes screenshots of target desktop and automatically downloads them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX Screen Capture', 'Description' = %q This module takes...

StoryBoard Quick 6 Memory Corruption Vulnerability

This Metasploit module exploits a stack-based buffer overflow in StoryBoard Quick 6. require 'msf/core' class Metasploit3 'StoryBoard Quick 6 Memory Corruption Vulnerability', 'Description' = %q This module exploits a stack-based buffer overflow in StoryBoard Quick 6. , 'License' = MSFLICENSE,...

Final Draft 8 File Format Stack Buffer Overflow Vulnerability

This Metasploit module exploits a stack-based buffer overflow in Final Draft 8. Multiple fields are vulnerable to the overflow, however Word in IgnoredWords is the only field to accept mixed-case characters. require 'msf/core' class Metasploit3 'Final Draft 8 File Format Stack Buffer Overflow',...

StoryBoard Quick 6 Memory Corruption

require 'msf/core' class Metasploit3 'StoryBoard Quick 6 Memory Corruption Vulnerability', 'Description' = %q This module exploits a stack-based buffer overflow in StoryBoard Quick 6. , 'License' = MSFLICENSE, 'Author' = 'vt [email protected]' , 'Version' = '$Revision: 10394 $'...

MS13-096 Microsoft Tagged Image File Format (TIFF) Integer Overflow

This module exploits a vulnerability found in Microsoft's Tagged Image File Format. It was originally discovered in the wild, targeting Windows XP and Windows Server 2003 users running Microsoft Office, specifically in the Middle East and South Asia region. The flaw is due to a DWORD value...

Final Draft 8 File Format Stack Buffer Overflow

require 'msf/core' class Metasploit3 'Final Draft 8 File Format Stack Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in Final Draft 8. Multiple fields are vulnerable to the overflow, however in is the only field to accept mixed-case characters. , 'License'...

StoryBoard Quick 6 Memory Corruption

require 'msf/core' class Metasploit3 'StoryBoard Quick 6 Memory Corruption Vulnerability', 'Description' = %q This module exploits a stack-based buffer overflow in StoryBoard Quick 6. , 'License' = MSFLICENSE, 'Author' = 'vt [email protected]' , 'Version' = '$Revision: 10394 $'...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple unspecified vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A...

Fedora Update for libtiff FEDORA-2013-15679

Check for the Version of libtiff OpenVAS Vulnerability Test Fedora Update for libtiff FEDORA-2013-15679 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2013-3156

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Access file, aka "Access File Format Memory Corruption Vulnerability."...

Debian Security Advisory DSA 2744-1 (tiff - several vulnerabilities)

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple vulnerabilities in various tools shipped by the tiff library. Processing a malformed file may lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2744.nasl 6611 2017-07-07 12:07:20Z cfischer ...

OSX Manage Webcam

This module will allow the user to detect installed webcams with the LIST action, take a snapshot with the SNAPSHOT action, or record a webcam and mic with the RECORD action This module requires Metasploit: https://metasploit.com/download Current source:...

Fedora Update for libtiff FEDORA-2013-14707

Check for the Version of libtiff OpenVAS Vulnerability Test Fedora Update for libtiff FEDORA-2013-14707 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[Pyew v2.2] A Python tool for static malware analysis

Pyew is a command line python tool to analyse malware. It does have support for hexadecimal viewing, disassembly Intel 16, 32 and 64 bits, PE and ELF file formats it performs code analysis and let you write scripts using an API to perform many types of analysis, follows direct call/jmp instructio...

Apple Safari webarchive File Format UXSS

A UXSS stack vulnerability has been reported in the Apple Safari webarchive File Format...

MediaCoder 0.8.23.5530 SEH Buffer Overflow Vulnerability

Mediacoder version 0.8.23.5530 SEH buffer overflow exploit that spawns calc.exe. !/usr/bin/python print """ +Exploit Title: Mediacoder 0.8.23.5530 SEH Buffer Overflow +Download All Product: http://www.mediacoderhq.com/editions.html +Vulnerable Product:! +Mediacoder 0.8.23.5530 +Vulnerabilities Fi...