6526 matches found
Universal Fuzzer by Codenomicon !
Codenomicon is a Finland based Information Security company. Recently it has released a universal fuzzer, a fuzz testing solution that combines heuristics and multiple fuzzers with a graphical user interface, automated test executions and reporting features. Fuzzing has been popular between hacke...
mountall 2.15.2 (Ubuntu 10.04/10.10) - Local Privilege Escalation
source: https://www.securityfocus.com/bid/43084/info !/bin/sh by fuzz. For Anux inc. ubuntu 10.04 , 10.10 if -z "$1" then echo "usage: $0 " echo "see here http://www.reactivated.net/writingudevrules.html" exit fi cat usn985-exploit.sh usn985-sc.c /dev/.udev/rules.d/root.rules chmod +x...
超级巡警 <= v4 Build0316 ASTDriver.sys 本地特权提升漏洞
该漏洞是我2010年4月6日晚上，通过自己的IoControl Fuzz工具挖掘的。漏洞存在于超级巡警ASTDriver.sys这个驱动中，影响超级巡警v4 Build0316和以前的版本。利用该漏洞能够实现本地特权提升，进Ring0。 PAGEFAULTINNONPAGEDAREA 50 Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad ...
Respect The Fuzzer
This image from Charlie Miller’s CanSecWest presentation credit InfoSec Events shows how a small home-brewed fuzzing tool found multiple exploitable vulnerabilities in Apple’s Preview, Microsoft’s PowerPoint and OpenOffice. At the Pwn2Own contest, all the vulnerabilities used in the winning...
eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash
Exploit for windows platform in category dos / poc =========================================================================== eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC =========================================================================== Title: eDisplay...
Microsoft Releases New SDL Security Tools
Microsoft’s Security Development Lifecycle SDL team has released two new security tools to help developers test and verify the security of software programs. The tools — BinScope Binary Analyzer and MiniFuzz File Fuzzer — are available for download at no cost. The BinScope Binary Analyzer can be...
Dranzer: Fuzzing for ActiveX vulnerabilities
The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...
curl security update
7.15.5-2.1.el53.4 - another correction of the patch for CVE-2009-0037 7.15.5-2.1.el53.3 - forwardport one hunk from upstream curl-7.15.1 Related: 485290 7.15.5-2.1.el53.2 - fix hunk applied to wrong place due to nonzero patch fuzz Related: 485289 7.15.5-2.1.el53.1 - fix CVE-2009-0037 Resolves:...
Debian: Security Advisory (DSA-302)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 302-1 (fuzz)
The remote host is missing an update to fuzz announced via advisory DSA 302-1. OpenVAS Vulnerability Test $Id: deb3021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 302-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Unfixed XSS vulnerability at www.ananzi.co.za
Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.ananzi.co.za, which at the time of submission ranked 20655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...
Unfixed XSS vulnerability at onlinebooks.library.upenn.edu
Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting onlinebooks.library.upenn.edu, which at the time of submission ranked 2804 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It i...
Unfixed XSS vulnerability at www.theatlantic.com
Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.theatlantic.com, which at the time of submission ranked 12558 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is current...
Unfixed XSS vulnerability at www.faqs.org
Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.faqs.org, which at the time of submission ranked 5737 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...
Unfixed XSS vulnerability at www.clyde1.com
Security researcher FuZz, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.clyde1.com, which at the time of submission ranked 286506 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currently...
OWASP JBroFuzz 0.3 Fuzzer Released!
JBroFuzz is an OWASP Project that emerged from penetration testing. It deals with fuzzing stateless network protocols such as HTTP, SOAP, XML, LDAP, etc. Apart from fancy terminology, JBroFuzz 0.3 has inbuilt the following Generators ready to be used: basic cross site scripting checks XSS basic S...
Debian DSA-302-1 : fuzz - privilege escalation
Joey Hess discovered that fuzz, a software stress-testing tool, creates a temporary file without taking appropriate security precautions. This bug could allow an attacker to gain the privileges of the user invoking fuzz, excluding root fuzz does not allow itself to be invoked as root. %NASLMINLEV...
CVE-2003-0261
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...
