CVE-2010-0273

Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vdsjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no...

Tandberg MXP F7.0 (USER) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Tandberg MXP F7.0 USER Remote Buffer Overflow PoC =================================================== TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We...

Tandberg MXP F7.0 - USER Remote Buffer Overflow (PoC)

Tandberg MXP F7.0 - USER Remote Buffer Overflow PoC TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We crash the process FtpCt00 by sending a 251 char string of /x20 commonly known as a blank space.very simple + The BOF happens due to the system passing all...

Tandberg MXP F7.0 - 'USER' Remote Buffer Overflow (PoC)

TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We crash the process FtpCt00 by sending a 251 char string of /x20 commonly known as a blank space.very simple + The BOF happens due to the system passing all usernames:passwords to a log file. + Vendor has fixe...

AwingSoft Web3D Player - WindsPly.ocx Remote Buffer Overflow (PoC)

AwingSoft Web3D Player - WindsPly.ocx Remote Buffer Overflow PoC ----------------------------------------------------------------------------- AwingSoft Web3D Player WindsPly.ocx "SceneURL" Remote Buffer Overflow url: http://www.awingsoft.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

AwingSoft Web3D Player (WindsPly.ocx) Remote BOF PoC

No description provided by source. ----------------------------------------------------------------------------- AwingSoft Web3D Player WindsPly.ocx "SceneURL" Remote Buffer Overflow url: http://www.awingsoft.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/...

HP Data Protector 4.00-sp1 43064 Denial Of Service

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Data Protector...

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Data Protector...

RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities

RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities 2009.February.05 Fortinet's FortiGuard Global Security Research Team Discovers Two Vulnerabilities in RealNetworks RealPlayer. Summary: ======== Two code execute vulnerabilities exist in RealNetworks RealPlayer 11...

Manual crack fast flash reduction-vulnerability warning-the black bar safety net

Information source: evil octal information security team www.eviloctal.com） Article author: monsterok（monster） Go to the cafe Internet, I downloaded a half-day things, can let I accidentally put the computer the power to kick, because the cafe machine is installed restore, reboot after everything...

Design/Logic Flaw

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript...

CVE-2008-5013

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript...

CVE-2008-5013

CVE-2008-5013 affects Mozilla Firefox 2.x (pre-2.0.0.18) and SeaMonkey 1.x (pre-1.1.13). The issue arises when the Flash module is dynamically unloaded via an outside JavaScript function, leading to an access of an expired memory address and allowing remote code execution with a crafted SWF file....

CVE-2008-5013

Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript...

Arbitrary code execution via Flash Player dynamic module unloading — Mozilla

An anonymous security researcher reported via TippingPoint's Zero Day Initiative that insufficient checks were being performed to test whether the Flash module was properly dynamically unloaded. The researcher demonstrated that a SWF file which dynamically unloads itself from an outside JavaScrip...

Brk vulnerability analysis and remediation-vulnerability and early warning-the black bar safety net

| brk vulnerability analysis A little out of date music at: I hope everyone also can be a little. --- Brk vulnerability analysis by icbm@0x557 1. brk loopholes in the background 2. The vulnerability principle analysis 3. Exploit analysis 4. The vulnerability is caused by thinking Brk vulnerabilit...

Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)

No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...

Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Remote Buffer Overflow

MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care 00D473D8 LEA EDX,DWORD PTR SS:EBP-1C ; 00D473DB PUSH EDX 00D473DC PUSH EAX 00D473DD MOV DWORD PTR DS:ESI+2A0,EAX ; ============= 00D473E3 == MOV ECX,DWORD PTR DS:EAX ; Here is the problem,the data stored by EAX is referenced and mov...

Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit

Exploit for unknown platform in category local exploits ======================================================================== Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit ======================================================================== usage: vbexploit.py...

Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit

No description provided by source. usage: vbexploit.py FileName.vbp import sys print "--------------------------------------------------------------------------" print " PoC2 Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution " print " author: shinnai"...