Vulnerability in OpenSSL CVE-2010-1633

An invalid Return value check in pkeyrsaverifyrecover was discovered. When verification recovery fails for RSA keys an uninitialised buffer with an undefined length is returned instead of an error code. This could lead to an information leak...

ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability

ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-060 April 5, 2010 -- CVE ID: CVE-2010-0842 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -...

Simple Calculator by Peter Rekdal Sunde - Arbitrary File Upload

======================================================================================== | Title : Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug : Remote Upload...

Simple Calculator by Peter Rekdal Sunde - Arbitrary File Upload

Simple Calculator by Peter Rekdal Sunde - Arbitrary File Upload ======================================================================================== | Title : Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lun...

Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability

No description provided by source. ======================================================================================== | Title : Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bu...

SA-CONTRIB-2010-032 - Taxonomy Breadcrumb - Cross Site Scripting (XSS)

The Taxonomy Breadcrumb module generates taxonomy based breadcrumbs on node pages and taxonomy/term pages. This module does not properly sanitize taxonomy term name and, for 6.x, node titles when displayed in breadcrumbs, leading to a Cross Site Scripting XSS vulnerability. XSS vulnerabilities ma...

Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability

Exploit for php platform in category web applications =================================================================== Simple Calculator by Peter Rekdal Sunde Remote Upload Vulnerability ===================================================================...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

Design/Logic Flaw

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

RM Downloader .m3u BOF (SEH)

Exploit for unknown platform in category local exploits ============================ RM Downloader .m3u BOF SEH ============================ !/usr/bin/perl -w Author: Jacky Version: 3.0.2.1 Tested on: Windows XP SP2 RM Downloader m3u Buffer Overflow SEH Perl Edition Discovered by :: Peter Van...

RM Downloader - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/perl -w Author: Jacky Version: 3.0.2.1 Tested on: Windows XP SP2 RM Downloader m3u Buffer Overflow SEH Perl Edition Discovered by :: Peter Van Eeckhoutte VERY BIG GREETZ TO HIM ;- Written by Jacky All Greetz for Peter Van Eeckhoutte and Corelan Team !!! I tried to exploit it by a Direct...

Switch Sound File Converter - .mpga Buffer Overflow (Denial of Service) (PoC)

Switch Sound File Converter - .mpga Buffer Overflow Denial of Service PoC Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Gree...

Soritong v1.0 Universal BOF (Python)

No description provided by source. Soritong MP3 Player 1.0 Universal BOF ! Greetz to Peter Van Eeckhoutte and Corelanc0d3r team ;- Discovered by : Stack Written by : Jacky I searched for a Python Edition for this Vulnerability but i haven't found any Python written exploit So i decided to give it...

Mini-stream Ripper 3.0.1.1 - .pls Universal Buffer Overflow (Python)

Mini-stream Ripper 3.0.1.1 - .pls Universal Buffer Overflow Python Mini-stream Ripper 3.0.1.1 .pls Universal BOF!!! Discovered by : mrme Greetz to him ;- Written by : Jacky ! Greetz to Peter Van Eeckhoutte and Corelanc0d3r Team ! I used a UNIVERSAL Address here , so the exploit should run on many...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

Expat 2.0.1 UTF-8 Character XML Parsing Remote DOS Vulnerability

Exploit for unknown platform in category dos / poc ============================================================================== Expat 2.0.1 UTF-8 Character XML Parsing Remote Denial of Service Vulnerability ============================================================================== Title:...

ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability

ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-079 November 4, 2009 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-048 August 5, 2009 -- CVE ID: CVE-2009-1919 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Customer...