Opera Use-After-Free Proof Of Concept

Bug Details Name: Opera – Use After Free - Crash PoC Vendor Website: www.opera.com Initial Notification Date: October 4th , 2011 Affected Software: Opera v11.51 and previous versions Researcher: Roberto Suggi Liverani Description The PoC Proof of Concept provided below causes a crash in the lates...

DivX Plus Web Player 2.1.2.265 Buffer Overflow

Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j gmail Version: DivX Plus Web Player dd esp 049ff35c 045e56d4 00000000 03d6c8e3 049ffbfc 049ff36c 045e56d0 04634f9e 001f5980 00000000 049ff37c 001eb9e0 00000000 001c5258...

DivX Plus Web Player - file: Buffer Overflow (PoC)

DivX Plus Web Player - file: Buffer Overflow PoC Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j gmail Version: DivX Plus Web Player dd esp 049ff35c 045e56d4 00000000 03d6c8e3 049ffbfc 049ff36c 045e56d0 04634f9e 001f59...

DivX Plus Web Player - 'file://' Buffer Overflow (PoC)

Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j gmail Version: DivX Plus Web Player dd esp 049ff35c 045e56d4 00000000 03d6c8e3 049ffbfc 049ff36c 045e56d0 04634f9e 001f5980 00000000 049ff37c 001eb9e0 00000000 001c5258...

Google Chrome < 14.0.835.202 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 14.0.835.202. It therefore is potentially affected by the following vulnerabilities : - Use-after-free errors exist that are related to text line box handling and the v8 JavaScript engine bindings. CVE-2011-2876,...

DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC

Exploit for windows platform in category dos / poc Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j gmail Version: DivX Plus Web Player dd esp 049ff35c 045e56d4 00000000 03d6c8e3 049ffbfc 049ff36c 045e56d0 04634f9e...

FreeBSD UIPC socket heap overflow proof-of-concept

Exploit for freebsd platform in category dos / poc !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...

ScriptFTP 3.3 - Remote Buffer Overflow (Metasploit)

Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 'ScriptFTP 3.3 Remote Buffer Overflow', 'Description'...

Anonymous releases 25,000 records of the Austrian police

Anonymous releases 25,000 records of the Austrian police Anonymous Austria post via the official Twitter account about 25,000 records Austrian police officers. Observers suspect that the data from the Austrian section of the "International Police Association" could come. Meanwhile, the far-right...

ScriptFTP 3.3 Remote Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class...

FreeBSD : OpenSSL -- multiple vulnerabilities (2ecb7b20-d97e-11e0-b2e2-00215c6a37bb)

OpenSSL Team reports : Two security flaws have been fixed in OpenSSL 1.0.0e Under certain circumstances OpenSSL's internal certificate verification routines can incorrectly accept a CRL whose nextUpdate field is in the past. CVE-2011-3207 OpenSSL server code for ephemeral ECDH ciphersuites is not...

Google Chrome multiple vulnerabilities - September11 (Mac OS X)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep11macosx.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome multiple vulnerabilities - September11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011...

Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed...

Mini FTP Server 1.1 Denial Of Service

!/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed code. Works with Total commander. Desc: MiniFTPServ...

Google Fixes 11 Flaws in Chrome 13.0.782.215

Google has patched 11 vulnerabilities in its Chrome browser, one of them critical, and paid out more than $8,500 in rewards to researchers for reporting bugs. The most serious vulnerability that Google fixed in Chrome 13.0.782.215 is a critical memory-corruption flaw in Chrome’s vertex handling...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

Binary data 6016.pasl...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

Binary data 800914.prm...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 13.0.782.215 and is potentially affected by several vulnerabilities: - An unspecified error related to command line URL parsing exists. Issue 72492 - Use-after-free errors related to line box handling, counter nodes, custom...

Stable Channel Update

The Chrome Stable channel has been updated to 13.0.782.215 for all platforms. This release contains the following security fixes. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are ...

CVE-2011-2990

The CVE-2011-2990 vulnerability affects Mozilla Firefox 4.x–5 and SeaMonkey 2.x (before 2.3) where Content Security Policy (CSP) violation reports do not strip proxy-authorization credentials from the request headers, enabling potential leakage of credentials when a CSP report is read. The issue ...