0day Exploit Released : Adobe, HP, Sun, Microsoft Interix & many more Vendors FTP hackable !

0day Exploit Released : Adobe, HP, Sun, Microsoft Interix & many more Vendors FTP hackable ! Topic : Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon CVE : CVE-2010-2632 CWE : CWE-NOMAPPING SecurityRisk : Medium About Remote Exploit : Yes Local Exploit : Yes Victim interacti...

Mozilla Firefox 4.0 (xul.dll) DLL Hijacking Exploit

Exploit for windows platform in category local exploits Exploit Title: Mozilla Firefox 4.0 xul.dll using .shtml DLL Hijacking Exploit Author: Caddy-Dz Facebook Page: www.facebook.com/islam.caddy E-mail: email protected Category: Local Exploit Tested on: Windows Xp Sp 2 | Special Greets To :...

Babylon Dictionary <= DLL Hijacking Exploit

Exploit for windows platform in category local exploits Exploit Title: Babylon Dictionary Special Greets To : KedAns-Dz & All Algerians Hackers Vulnerable extensions: .dcb Vulnerable Dlls: besextension.dll ------------------------------- include define DllExport declspec dllexport DllExport void...

6-year FreeBSD-SA-05:02.sendfile exploit

Hi, This is almost 0-day. In a sense. I wrote this for a pentesting company. I found it ethically OK to do since the FreeBSD advisory was already out for a couple of weeks. It turns out I was not alone to write an exploit for this bug, and to publish the exploit this year. Timeline: 2005/04/04 -...

PT-2011-1093 · Logrotate +2 · Logrotate +2

Name of the Vulnerable Software and Affected Versions: logrotate versions 3.7.9 and earlier logrotate versions prior to 3.8.0 Description: The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename. This can be demonstrated by a filename...

IDEAL Administration 2011 11.4 Buffer Overflow

!/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, another exploit... come on guys. windows/shellbindtcp - 696 bytes...

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe Version: 2011 RC3 Tested o...

Imageview 6.0 Directory Traversal

Exploit Title: Imageview v6.0 Remote and Local Directory Traversal Vulnerability Google Dork: inurl:"/imageview6/" home : www.D99Y.com Date: 27/2/2011 Author: Difficult 511 Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip Version: 6.0 Tested on: windows xp sp2 file :...

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...

AOL 9.5 .rtx Local Buffer Overflow

!/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...

acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities

acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/45915/info The 'acpid' daemon is prone to multiple local denial-of-service vulnerabilities. Successful exploits will allow attackers to cause the application to hang, denying service to...

acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/45915/info The 'acpid' daemon is prone to multiple local denial-of-service vulnerabilities. Successful exploits will allow attackers to cause the application to hang, denying service to legitimate users. acpid 1.0.10 is vulnerable; other versions may...

VideoSpirit Pro 1.68 Buffer Overflow

Exploit Title: VideoSpirit Pro v1.68 Local BoF Exploit Date: 01/08/2011 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecatx-sploited.com Software Link: http://www.verytools.com/videospirit/download.html Vulnerable version: v1.68 Tested on: Windows XP SP3 Eng Software...

VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow

Exploit Title: VideoSpirit Pro v1.68 Local BoF Exploit Date: 01/08/2011 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecatx-sploited.com Software Link: http://www.verytools.com/videospirit/download.html Vulnerable version: v1.68 Tested on: Windows XP SP3 Eng Software...

PT-2010-5380 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue allows local users to bypass intended access restrictions, overwrite arbitrary kernel memory locations, and gain privileges. This can be achieved by leveraging a BUG, NULL pointer...

PT-2010-5429 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc6 Description: The issue is related to the install special mapping function in mm/mmap.c, which fails to make an expected security file mmap function call. This allows local users to bypass intended mma...

OTSTurnTables 1.00.028 Buffer Overflow

Exploit Title: OTSTurntables 1.00.028 m3u/ofl Local BOF Exploit SEH Date: 11/24/2010 Author: 0v3r Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.048 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python import sys win32bind - EXITFUNC=seh LPORT=4444 Size=6...

CVE-2010-3999

CVE-2010-3999 affects GnuCash 2.3.15 and earlier, where gnc-test-env places a zero-length directory name in LD_LIBRARY_PATH, enabling a local attacker to gain privileges via a Trojan horse shared library in the current working directory. Public advisories (Fedora openVAS entries, Mandriva MDVSA-2...

GSPlayer 1.83a Win32 Release - Local Buffer Overflow

Exploit Title: GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability Date: 2010/11/04 Author: moigai e-mail: [email protected] Software Link: http://www.vector.co.jp/download/file/win95/art/fh296344.html Version: 1.83a Win32 Release Tested on: Windows XP SP3 En VM my $file = "GSPlayer.m3u"...

Trend Micro Titanium Maximum Security 2011 Local Exploit

1.Description: The tmtdi.sys kernel driver distributed with Trend Micro Titanium Maximum Security 2011 contains a pointer overwrite vulnerability in the handling of IOCTL 0x220404. Exploitation of this issue allows an attacker to execute arbitrary code within the kernel. An attacker would need...