ZipItFast PRO 3.0 - Local Heap Overflow

!/usr/bin/perl --------------------------------------------------------------------------- Exploit: ZipItFast PRO v3.0 Heap-Overflow Author: b33f - http://www.fuzzysecurity.com/ OS: Windows XP SP1 DOS POC: C4SS!0 G0M3S = http://www.exploit-db.com/exploits/17512/ Software:...

CVE-2012-1859

CVE-2012-1859 is a cross-site scripting (XSS) vulnerability in SharePoint components: scriptresx.ashx affects SharePoint Server 2010 (Gold/SP1) and Foundation 2010 (Gold/SP1), as well as Office Web Apps 2010. The issue allows remote attackers to inject arbitrary JavaScript/HTML by crafting elemen...

Internet Explorer Same ID Property Deleted Object Handling Memory Corruption

Exploit for windows platform in category remote exploits MS12-037 Internet Explorer Same ID Property Deleted Object Handling Memory Corruption This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for mor...

CVE-2012-1866

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to...

CVE-2012-1866

CVE-2012-1866 concerns a local privilege escalation in the Windows kernel-mode drivers, specifically the win32k.sys component. The issue arises from improper handling of user-mode input passed to kernel-mode driver objects, enabling a local attacker to gain elevated privileges via a crafted appli...

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen -...

GIMP script-fu Server Buffer Overflow

This module exploits a buffer overflow in the script-fu server component on GIMP use exploit/windows/misc/gimp/scriptfu msf undefinedscriptfu show actions ...actions... msf undefinedscriptfu set ACTION msf undefinedscriptfu show options ...show and set options... msf undefinedscriptfu run This...

Memory corruption

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel...

CVE-2012-0018

CVE-2012-0018 affects Microsoft Visio Viewer 2010 Gold and SP1. The issue is memory corruption caused by improper validation of attributes in Visio files, leading to remote code execution when processing crafted Visio documents (aka VSD File Format Memory Corruption). Severity in NVD is high (CVS...

Microsoft Visio Viewer VSD文件格式远程代码执行漏洞(MS12-031)

BUGTRAQ ID: 53328 CVE ID: CVE-2012-0018 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 MMicrosoft Visio在验证Visio文件格式的某些属性的实现上存在远程代码执行漏洞，攻击者可通过特制的Visio文件利用此漏洞破坏内存，以当前用户权限执行任意代码。 0 Microsoft Visio Viewer 2010 SP1 Microsoft Visio Viewer 2010 0 厂商补丁： Microsoft ---------...

Siemens SIMATIC STEP 7 DLL Vulnerability

Overview Siemens has released a software update for a DLL hijacking vulnerability in SIMATIC STEP 7 and SIMATIC PCS 7 software. Previous versions of SIMATIC STEP 7 and PCS 7 allowed the loading of malicious DLL files into the STEP 7 project folder that can be used to attack the system on which ST...

CVE-2012-0147

Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."...

Open redirect

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."...

CVE-2012-0147

Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."...

Immunity Canvas: CVE_2011_3175

Name| CVE20113175 ---|--- CVE| CVE-2011-3175 Exploit Pack| CANVAS Description| Novell ZENworks Configuration Management 0x6c Buffer Overflow Notes| CVE Name: CVE-2011-3175 VENDOR: Novell Notes: Tested on ZenWork Configuration Managment 10 SP3 on Windows Server 2003 SP1 This exploit should work an...

Csound hetro File Handling Stack Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Microsoft Games Chess.exe DOS PoC

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Games Chess.exe DOS PoC Date: 3/25/2012 Author: Dan Fosco Vendor or Software Link: www.microsoft.com Version: 6.1.7600.16385 Category: dos Google dork: n/a Tested on: Windows 7 SP1 64-bit Greetz: Inj3ct0r Exploit DataBase...

Sysax 5.53 SSH Username Buffer Overflow

This module exploits a vulnerability found in Sysax's SSH service. By supplying a long username, the SSH server will copy that data on the stack without proper bounds checking, therefore allowing remote code execution under the context of the user. Please note that previous versions before 5.53 a...

CVE-2012-0019

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020...

CVE-2012-0138

CVE-2012-0138 affects Microsoft Visio Viewer 2010 Gold and SP1. The vulnerability arises from improper memory handling while parsing Visio files, allowing remote code execution via crafted attributes in a VSD file. Microsoft issued MS12-015 to address these Visio parsing memory corruption flaws (...