5596 matches found
FTP Synchronizer Professional 4.0.73.274 - Remote Stack Buffer Overflow (Metasploit)
$Id: ftpsynchlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Foxit Reader 4.1.1 - Stack Overflow
Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite. The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler. This vulnerability was reported to the...
Foxit Reader 4.1.1 - Stack Overflow
Foxit Reader 4.1.1 - Stack Overflow Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite. The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler. This...
Watcher 1.4.1 - latest version download
"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...
Quick-Player
Quick Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. This version affects Quick Player 2.3.x import sys...
Sybase Advantage Data Architect - '.SQL' Format Heap Overflow
Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...
Sybase Advantage Data Architect - .SQL Format Heap Overflow
Sybase Advantage Data Architect - .SQL Format Heap Overflow Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link:...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6563)
This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues : - Mozilla developers and community members...
Microsoft Unicode Scripts Processor Remote Code Execution
Exploit for windows platform in category dos / poc ========================================================= Microsoft Unicode Scripts Processor Remote Code Execution ========================================================= Title : Microsoft Unicode Scripts Processor Remote Code Execution Versio...
Month Of Abysssec Undisclosed Bugs - Microsoft Unicode Scripts Processor
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...
Quick Player 1.3 Unicode SEH Exploit
Exploit for windows platform in category local exploits ==================================== Quick Player 1.3 Unicode SEH Exploit ==================================== Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain email protected , abhilyallatgmaildotcom,...
Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)
Microsoft Unicode Scripts Processor - Remote Code Execution MS10-063 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version :...
Quick Player 1.3 Unicode SEH Exploit
Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Microsoft Unicode Scripts Processor - Remote Code Execution (MS10-063)
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis : http://www.abysssec.com Vendor :...
Quick Player 1.3 - Unicode (SEH)
Quick Player 1.3 - Unicode SEH Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable applicatio...
Quick Player 1.3 - Unicode (SEH)
Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
BS.Player 2.56 Denial Of Service
!/usr/bin/python Exploit Title: BS.Player 2.56 Build 1043 .m3u and .pls Denial of Service Date: September 27, 2010 Author: modpr0be Software Link: http://www.bsplayer.com/bsplayer-setup.exe Version: 2.0.0 Tested on: Windows XP SP3/2003 CVE : - How it works? Open BS.Player -- Open the Playlist...
SonicWALL Aventail - 'epi.dll' AuthCredential Format String (Metasploit)
$Id: aventailepiactivex.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Memory corruption
The Uniscribe aka new Unicode Script Processor implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenTy...
CVE-2010-2738
Microsoft Windows/Office Uniscribe (USP10.DLL) vulnerability CVE-2010-2738 involves improper validation of tables in OpenType fonts, leading to remote code execution via crafted web pages or Office documents. Affected components include USP10.DLL across Windows XP SP2/SP3, Server 2003 SP2, Vista ...