Immunity Canvas: WINDOWS_SHELL_LNK

Name| windowsshelllnk ---|--- CVE| CVE-2010-2568 Exploit Pack| CANVAS Description| windowsshelllnk Notes| CVE Name: CVE-2010-2568 VENDOR: Microsoft Notes: VersionsAffected: Windows XP, Windows 2003, Windows Vista, Windows 2008, Windows 7 Repeatability: Infinite References:...

Immunity Canvas: EVOCAM

Name| evocam ---|--- CVE| CVE-2010-2309 Exploit Pack| CANVAS Description| EVOCAM Notes| CVSS: 7.5 Repeatability: One shot VENDOR: Evologic CVE Url: https://vulners.com/cve/CVE-2010-2309 CVE Name: CVE-2010-2309...

Immunity Canvas: IE_HCP

Name| iehcp ---|--- CVE| CVE-2010-1885 Exploit Pack| CANVAS Description| iehcp Notes| CVE Name: CVE-2010-1885 VENDOR: Microsoft Notes: http://www.microsoft.com/technet/security/Bulletin/MS10-042.mspx Repeatability: Infinite MSADV: MS10-042 Date public: 06/09/2010 CVE Url:...

Immunity Canvas: MS10_032

Name| ms10032 ---|--- CVE| CVE-2010-0485 Exploit Pack| CANVAS Description| ms10032 Notes| CVE Name: CVE-2010-0485 VENDOR: Microsoft Notes: This is a local kernel vulnerability for XP, 2003, and Vista. It will only work on 32 bit platform. The binary will not trigger the bug if running on a 64 bit...

Immunity Canvas: FLASH_NEWFUNCTION

Name| flashnewfunction ---|--- CVE| CVE-2010-1297 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Invalid newfunction call Notes| CVE Name: CVE-2010-1297 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Acrobat 9....

Immunity Canvas: MS10_026

Name| ms10026 ---|--- CVE| CVE-2010-0480 Exploit Pack| CANVAS Description| MPEG Layer-3 codecs stack overflow Notes| CVE Name: CVE-2010-0480 VENDOR: Microsoft MSADV: MS10-026 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS10-026.mspx Note: This is a client-side...

Immunity Canvas: JAVA_METHOD_CHAIN

Name| javamethodchain ---|--- CVE| CVE-2010-0840 Exploit Pack| CANVAS Description| javamethodchain Notes| CVE Name: CVE-2010-0840 VENDOR: Sun Repeatability: Infinite client side - no crash References:...

Immunity Canvas: JAVA_DESERIALIZE2

Name| javadeserialize2 ---|--- CVE| CVE-2010-0094 Exploit Pack| CANVAS Description| javadeserialize2 Notes| CVE Name: CVE-2010-0094 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/63484 Repeatability: Infinite client side - no crash References:...

Immunity Canvas: IE_PEERS_SETATTRIBUTE

Name| iepeerssetattribute ---|--- CVE| CVE-2010-0806 Exploit Pack| CANVAS Description| iepeerssetattribute Notes| CVE Name: CVE-2010-0806 VENDOR: Microsoft Notes: This is the iepeers exploit for IE 6/7, first discovered in the wild in March, 2010. It will work on both DEP and non-DEP machines and...

(Gabriel's FTP Server) Open & Compact FTPd 1.2 - Crash (PoC)

Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to dookie2000ca Date Found: 07/02/2010 Software link: https://sourceforge.net/projects/open-ftpd/ Tested on: Windows XP SP2/SP3 Professional Nod to the Exploit-DB Team It's really just a DoS, but if someone can...

(Gabriels FTP Server) Open Compact FTPd 1.2 - Crash (PoC)

Gabriels FTP Server Open Compact FTPd 1.2 - Crash PoC Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to dookie2000ca Date Found: 07/02/2010 Software link: https://sourceforge.net/projects/open-ftpd/ Tested on: Windows XP SP2/SP3 Professional Nod to the...

Dave Aitel, Immunity

Dave is one of the four or five smartest people I’ve ever interviewed, and not just on matters related to security or technology in general. His posts on the Daily Dave mailing list are always thoughtful and often funny and he has a knack for explaining insanely complex exploitation techniques,...

Immunity Canvas: IE_DUMPFILES

Name| iedumpfiles ---|--- CVE| CVE-2010-0255 Exploit Pack| CANVAS Description| Internet Explorer local file include Notes| CVE Name: CVE-2010-0255 VENDOR: Microsoft Repeatability: Infinite client side - no crash MSRC: https://vulners.com/cve/CVE-2010-0255 CVS URL:...

AIC Audio Player 1.4.1.587 Local Crash PoC

Exploit for unknown platform in category local exploits ========================================== AIC Audio Player 1.4.1.587 Local Crash PoC ========================================== !/usr/bin/python Title: AIC Audio Player 1.4.1.587 Local Crash PoC Author: b0telh0 Link:...

Immunity Canvas: IE_COMMENTS

Name| iecomments ---|--- CVE| CVE-2010-0244 Exploit Pack| CANVAS Description| iecomments Notes| CVE Name: CVE-2010-0244 VENDOR: Microsoft MSADV: MS10-0?? VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx Date public: 12/25/2009...

Immunity Canvas: MS_NTVDM

Name| msntvdm ---|--- CVE| CVE-2010-0232 Exploit Pack| CANVAS Description| NtVdmControl-KiTrap0d local Notes| CVE Name: CVE-2010-0232 VENDOR: Microsoft Notes: This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows which is essentially all of them. It needs a writable directory to...

NIPrint LPD Request Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NIPrint LPD...

Immunity Canvas: SUN_JAVA_HSBPARSER_LINUX

Name| sunjavahsbparserlinux ---|--- CVE| CVE-2009-3867 Exploit Pack| CANVAS Description| sunjavahsbparserlinux Notes| URL: http://seclists.org/bugtraq/2009/Nov/37 CVE Name: CVE-2009-3867 VENDOR: Sun CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3867...

Immunity Canvas: AIXCMSD

Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...

Immunity Canvas: MS09_051

Name| ms09051 ---|--- CVE| CVE-2009-0555 Exploit Pack| CANVAS Description| ASFAudiomedia Parsing bug Notes| CVE Name: CVE-2009-0555 VENDOR: Microsoft MSADV: MS09-051 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS09-051.mspx Note: This is a client-side exploit ...