Adobe Flash - AVSS.setSubscribedTags Use-After-Free Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=303&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=470864 VULNERABILITY DETAILS Use After Free in Flash AVSS.setSubscribedTags,...

Adobe Flash - Heap Use-After-Free in SurfaceFilterList::C​reateFromScriptAtom

Source: https://code.google.com/p/google-security-research/issues/detail?id=484&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=508072 VULNERABILITY DETAILS Copy Paste of Issue 480496 VERSION Chrome Version:...

Adobe Flash AS2 - Color.setRGB Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=367&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Deadline tracking for Chromium VRP bug https://code.google.com/p/chromium/issues/detail?id=484610 Credit is to bilou, working with the Chromium...

win32/xp [TR] sp3 MessageBox - shellcode 24 bytes

win32/xpTR sp3 MessageBox - 24Bytes Greetz : Bomberman&T-Rex Author : B3mB4m Proof : http://imgur.com/727ALiY I know there is nothing new.I wrote just to say "I am back" .. -Coming soon- arwin.c v2 .. Polymorphic shellcodes .. Win7,Win8,Win10 shellcodes .. RunPE & Migrate ? !!If bomberman allowed...

Coremail邮箱正文持久型XSS

简要描述： 为了测试，购买域名和邮箱花了二十块。 详细说明： 在母鸡的指导下把邮箱解析好了，就用自己的邮箱给coremail发了封邮件测试下。 接着发现firefox下来信邮箱的昵称img src=1被嵌入入了网页中 使用firefox插件Tamper Data抓包改我qq邮箱的昵称,不要continue 接着改sendname参数，写入 然后就触发了 漏洞证明： win7下 osx下 img src="https://images.seebug.org/upload/201506/2918161341e69ed475cebd562eaaf59b0b3a8371.png"...

Filezilla 3.11.0.2 - SFTP Module Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ''' Exploit title: filezilla 3.11.0.2 sftp module denial of service vulnerability Date: 5-6-2015 Vendor homepage: http://www.chiark.greenend.org.uk Software Link:...

Putty 0.64 Denial Of Service

Exploit title: putty v0.64 denial of service vulnerability Date: 5-6-2015 Vendor homepage: http://www.chiark.greenend.org.uk Software Link: http://the.earth.li/sgtatham/putty/latest/x86/putty-0.64-installer.exe Version: 0.64 Author: 3unnym00n Details: -------- when doing the ssh dh group exchange...

FileZilla 3.11.0.2 SFTP Module - Denial of Service

''' Exploit title: filezilla 3.11.0.2 sftp module denial of service vulnerability Date: 5-6-2015 Vendor homepage: http://www.chiark.greenend.org.uk Software Link:...

Microsoft Windows HTA Crash Proof Of Concept

/ + Author: Mohammad Reza Espargham + Title: MS Windows HTA HTML Aplication - Crash PoC + Date: 19-05-2015 + Tested on: Win7 dash save below code as Crash.hta file and Double Click on it ; Crash... / Mohammad Reza Espargham function ReZa var buffer = '\x43'; var buffer1 = '\x42'; var buffer2 =...

Jildi FTP Client 1.5.2 Build 1138 Buffer Overflow

!/usr/bin/python Exploit Title:Jildi FTP Client Buffer Overflow Poc Version:1.5.2 Build 1138 Homepage:http://de.download.cnet.com/Jildi-FTP-Client/3000-21604-10562942.html Software Link:http://de.download.cnet.com/Jildi-FTP-Client/3001-21604-10562942.html?hasJs=n&hlndr=1&dlm=0 Tested on:Win7 32bi...

Private Shell SSH Client 3.3 - Crash (PoC)

Private Shell SSH Client 3.3 - Crash PoC ''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- when doing t...

Wordpress Theme Nevada Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Nevada Arbitrary File Download Vulnerability Date: 01/05/2015 Exploit Author: X-Line Vendor Homepage: http://themeforest.unitedthemes.com/wpversions/nevada/ Contact : http://www.root-me.org/X-Line-24646 Tested on...

Microsoft Internet Explorer 11 - Crash (PoC) (1)

Exploit Title: Internet Explorer 11 - Crash PoC Google Dork: N/A Date: 19th May, 2015 Exploit Author: garage4hackers Vendor Homepage: http://garage4hackers.com/showthread.php?t=6246 Software Link: N/A Version: Tested on IE 11 Tested on: Windows 7 CVE : N/A case522207.html :nth-child5::before...

The IIS server vulnerability analysis-vulnerability warning-the black bar safety net

4 on 1 to 5 November, in Microsoft's patch day, Microsoft released a more high-risk vulnerabilities, one of MS15-0 3 4 vulnerability that affects most widely, will cause the IIS server to blue screen crash, special circumstances or lead to information disclosure. Alibaba security research...

WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (1)

Exploit Title :WordPress MiwoFTP Plugin 1.0.5 Arbitrary File Download Exploit Vendor :Miwisoft LLC Vendor Homepage :http://www.miwisoft.com Version :1.0.5 Tested on :Win7/Chrome/Firefox Exploit Author :Necmettin COSKUN =@babayarisi Discovery date :04/15/2015 MiwoFTP is a file manager plugin for...

RM Downloader 2.7.5.400 - Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

Nvidia Mental Ray Satellite Service Arbitrary DLL Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Nvidia Mental Ray Satellite Service Arbitrary DLL Injection', 'Description' = %q The Nvidia Mental Ray Satellite Service listens for...

Realtek 11n Wireless LAN utility - Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Realtek 11n Wireless LAN utility privilege escalation. Vulnerability Discovered by Humberto Cabrera @dniz0r http://zeroscience.mk @zeroscience Summary: ⁃ Realtek 11n Wireless LAN utility is deployed and used by realtek alfa cards and more in...

Realtek 11n Wireless LAN Utility Privilege Escalation

Realtek 11n Wireless LAN utility privilege escalation. Vulnerability Discovered by Humberto Cabrera @dniz0r http://zeroscience.mk @zeroscience Summary: ⁃ Realtek 11n Wireless LAN utility is deployed and used by realtek alfa cards and more in order to help diagnose and view wireless card propertie...

Realtek 11n Wireless LAN utility - Local Privilege Escalation

Realtek 11n Wireless LAN utility - Local Privilege Escalation Realtek 11n Wireless LAN utility privilege escalation. Vulnerability Discovered by Humberto Cabrera @dniz0r http://zeroscience.mk @zeroscience Summary: ⁃ Realtek 11n Wireless LAN utility is deployed and used by realtek alfa cards and...