2422 matches found
Microsoft Office Word 2010 Crash PoC
No description provided by source. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ----...
Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005) (2)
No description provided by source. sploit creater by [email protected] ms06-005 advisory proof of concept heap overflow in wmf.dll @ 0x0035920a denial of service, cuz we can't get this to play nice shamelessly stolen from CANVAS code def intelorderi: str= a=chri % 256 i=i 8 b=chri % 256 i...
Java Applet Method Handle Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...
MS15-061 Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei)
No description provided by source. include include / Exploiting MS15-061 with reverse engineering Win32k.sys by steps : 1: hook PEB callback Function 2: trigger vulnerability make proper Window to lead vulnerable function 3: replace fake object with NtUserDefSetText in Desktop heap inside PEB...
Microsoft Windows 9x File Handle Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1796/info The file sharing SMB service in Windows enables client applications to access and modify files from a server on the network. The SMB service within Windows 95/98 allocates 0x4004 bytes to store file handles...
Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain access to the SYSTEM account. / tac0tac0.c - pay no...
IRCnet IRCD 2.10 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of...
Asterisk <= 1.6 IAX 'POKE' Requests Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE'...
docker 0.11 VMM-container Breakout
Exploit for linux platform in category local exploits / shocker: docker PoC VMM-container breakout C 2014 Sebastian Krahmer Demonstrates that any given docker image someone is asking you to run in your docker setup can access ANY file on your host, e.g. dumping hosts /etc/shadow or other sensitiv...
openSUSE Security Update : inn (openSUSE-SU-2012:1171-1)
fix starttls command injection issue CVE-2012-3523, bnc776967 - handle /var/run on tmpfs. bnc778439 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-600. The text description of...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0964-1)
update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model -...
openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)
java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...
OpenJDK: method handle call hierachy bypass (Libraries, 8032686)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries...
OpenJDK: method handle call hierachy bypass (Libraries, 8032686)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries...
OpenJDK: method handle call hierachy bypass (Libraries, 8032686)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries...
OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402...
OpenJDK: method handle call hierachy bypass (Libraries, 8032686)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries...
Fedora 20 : rubygem-rack-ssl-1.3.2-9.fc20 (2014-4118)
Handle bad URIs gracefully CVE-2014-2538. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability (2913602)
This host is missing an important security update according to Microsoft Bulletin MS14-003 OpenVAS Vulnerability Test $Id: secpodms14-003.nasl 34348 2014-01-15 08:49:46Z jan$ Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability 2913602 Authors: Antu Sanadi Copyright: Copyright...
