588 matches found
Firefox 50.0.2 after the release reuse vulnerability analysis CVE-2016-9899-a vulnerability warning-the black bar safety net
Author: k0shl reprint please indicate the source author blog:http://whereisk0shl. top Preface Small year has passed, New Year rhythm, give you worship a early years, a Happy New Year! Haven't come across such after the release reuse vulnerability, which vulnerability causes is a very classic...
In ie8 using ROP and Heap Spray using the bounce of the shell-vulnerability warning-the black bar safety net
This exploit program is for the Windows 7 platform on the IE8 browser. The focus of our attention is one that uses the Java network launch Protocol JNLP the plug-in, this plug-in there is overflow vulnerability. In order to achieve the use, I will use the Heaplib to construct a ROP chain in order...
Microsoft Edge CTextExtractor::GetBlockText Out-Of-Bounds Read Exploit
A specially crafted web-page can cause an integer underflow in Microsoft Edge. This causes CTextExtractor::GetBlockText to read data outside of the bounds of a memory block. Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before...
Microsoft Edge CTextExtractor::GetBlockText Out-Of-Bounds Read
Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the fourteenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these throu...
IE browser exploits technology evolution(II)-vulnerability warning-the black bar safety net
Foreword In a previous article, we talked about some of the early ie related exploits, from the most basic, the most simple stack overflow vulnerability of the use of speaking, to the relatively more complex UAF exploits. Through these exploits evolution, as if we can see the human society from t...
shard - A Command Line Tool To Detect Shared Passwords
A command line tool to detect shared passwords Usage List options: $ java -jar shard-1.2.jar --help Shard 1.2 Usage: java -jar shard-1.2.jar options -u, --username Username to test -p, --password Password to test -f, --file File containing a set of credentials --format The format of the...
Browser exploits Getting Started-vulnerability warning-the black bar safety net
0x00 cve-2 0 1 2-1 8 8 9 IE This article is mainly want to record myself from the small white begin to contact under windows IE vulnerability debugging process, but also to think of is give more newbies a reference of the tutorial. Large cow light spray! The beginning is want to do this hole in x...
VulnCheck KEV: CVE-2015-6585
hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag...
New Heap-Spray Exploit Tied To LZH Archive Decompression
Researchers found a vulnerability in the classic compression standard Lhasa, once a mainstay for game developers in the mid-’90s and still in use today. Researchers at Cisco’s security research arm, Cisco Talos, identified the vulnerability calling it as a classic heap-spray exploit. In a report...
Spray can - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Spray can published at the 'play' market has multiple vulnerabilities...
Spray Carnival - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Spray Carnival published at the 'play' market has multiple vulnerabilities...
Spray Painter HD - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Spray Painter HD published at the 'play' market has multiple vulnerabilities...
Microsoft Internet Explorer 11 - javascript Code Execution
ARRSIZE = 3248; firstgadgetoffsets = 150104,149432,152680,3202586,214836,3204663,361185,285227,103426,599295,365261,226292,410596,180980,226276,179716,320389,175621,307381,792144,183476; stackpivotgadgetoffsets =...
Exploit for CVE-2016-0728
CVE-2016-0728 testbed This repository contains a test program...
Exploit for CVE-2014-7911
cve-2014-7911-exp exploit for cve-2014-7911; android; java des...
Adobe Flash JIT Spray ASLR/DEP Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Adobe Flash Player...
Microsoft Office 2007 - mso.dll Arbitrary Free (MS15-081)
Microsoft Office 2007 - mso.dll Arbitrary Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testin...
Tango FTP 1.0 Active-X Heap Spray Vulnerability
Tango FTP active-x heap spray exploit that leverages a vulnerability in the COM component used eSellerateControl350.dll 3.6.5.0 method of the GetWebStoreURL member. Affects version 1.0 build 136. Tango FTP Activex Heap Spray Exploit Version:1.0Build 136 The vulnerability lies in the COM component...
Tango DropBox 3.1.5 Active-X Heap Spray Vulnerability
Tango DropBox active-x heap spray exploit that leverages a vulnerability in the COM component used eSellerateControl350.dll 3.6.5.0 method of the GetWebStoreURL member. Affects versions 3.1.5 and PRO. Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM...
Tango DropBox 3.1.5 + PRO - Activex HeapSpray
Tango DropBox 3.1.5 + PRO - Activex HeapSpray Tango DropBox Activex Heap Spray Exploit Version:3.1.5 + PRO The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://etonica.com/dropbox/index.html Software...