Safari 4.0.4 Crash Proof Of Concept

The following piece of javascript will crash Safari nicely when triggered using one of the methods described below. With my limited knowledge I am unable to tell if it's exploitable or not. I therefore turn it over to "the internet". tested on Safari 4.0.4, Win XP Pro SP3...

Security fix for the ALT Linux 5 package MySQL version 5.0.89-alt1

Jan. 25, 2010 Anton Farygin 5.0.89-alt1 - new version closes 18943 - fixed CVE-2009-2446 from upstream closes 20724 - setup utf8 encoding instead of latin1 by default closes 12390 - include C99 aliasing violation patch from mythtv closes 22452 - removed username-length patch - wait for mysqld...

HTMLDOC 1.9.x-r1629 (Windows x86) - '.html' Local Buffer Overflow

/HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP SLEED 15 bytes calc.exe shellcode 338 bytes PLEASE READ: 1.Run...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'SafeNet...

Microsoft DirectPlay Denial of Service (CVE-2004-0202)

DirectPlay is a network protocol component of the DirectX game library. It provides networking functionality for developers who wish to develop networked applications, generally multi-player games. There exists a denial of service vulnerability in the IDirectPlay4 application programming interfac...

Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)

Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...

K-Meleon 1.5.3 Remote Array Overrun

No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/222 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 K-Meleon 1.5.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.:...

K-Meleon 1.5.3 Remote Array Overrun

Exploit for unknown platform in category dos / poc =================================== K-Meleon 1.5.3 Remote Array Overrun =================================== Title: K-Meleon 1.5.3 Remote Array Overrun CVE-ID: OSVDB-ID: Author: Maksymilian Arciemowicz and sp3x Published: 2009-11-19 Verified: yes...

Interactive Data eSignal Listener Buffer Overflow (CVE-2004-1868)

eSignal is a real-time market data and support tool provided by Interactive Data Corporation. The product supplies financial market data and more for traders over the internet. To facilitate the receipt of incoming data, eSignal opens a local, listening socket on TCP Port 80. There exists a buffe...

EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF...

Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)

In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...

Novell eDirectory 8.8 SP5 Proof Of Concept

PoC for Vulnerability: !usr\bin\perl Novell eDirectory 8.8 SP5 BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net to GamaSEC: "please continue to discover and publish XSS BUGS.. you can just do that ;"...

XLPD 3.0 - Remote Denial of Service

XLPD 3.0 - Remote Denial of Service Application: XLPD 3.0 Remote DoS Platforms: Windows XP Professional SP2 crash: YES Exploitation: remote DoS Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

EasyMail Quicksoft 6.0.2.0 ActiveX Remote Code Execution PoC

No description provided by source. Application: EasyMail Quicksoft 6.0.2.0 Platforms: Windows XP Professional French SP2 crash: IE 6.0.2900.2180 Exploitation: remote Code Execution Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The...

Safari 3.2.3 (Win32) JavaScript (eval) Remote DoS Exploit

No description provided by source. !/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript 'eval' Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Safari crashes when interpreting a webpage that calls the...

WarFTPd 1.82.00-RC12 - LIST Format String Denial of Service

WarFTPd 1.82.00-RC12 - LIST Format String Denial of Service Vulnerability : War FTP Daemon Format String DoS LIST command Detected by : corelanc0d3r corelanc0d3ratgmaildotcom Type : remote DoS OS : Windows Product : Jgaa's War FTP Daemon Versions affected : 1.82 RC 12 Download link :...

War FTP Daemon Format String Denial Of Service

Vulnerability : War FTP Daemon Format String DoS LIST command Detected by : corelanc0d3r corelanc0d3ratgmaildotcom Type : remote DoS OS : Windows Product : Jgaa's War FTP Daemon Versions affected : 1.82 RC 12 Download link : http://www.warftp.org/?menu=344...

Safari 3.2.3 (Win32) JavaScript (eval) Remote DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================= Safari 3.2.3 Win32 JavaScript eval Remote DoS Exploit ========================================================= !/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript...

Apple Safari 3.2.3 (Windows x86) - JavaScript eval Remote Denial of Service

Apple Safari 3.2.3 Windows x86 - JavaScript eval Remote Denial of Service !/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript 'eval' Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Safari crashes when...

Apple Safari 3.2.3 (Windows x86) - JavaScript 'eval' Remote Denial of Service

!/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript 'eval' Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Safari crashes when interpreting a webpage that calls the "eval" JavaScript function with "A/"...