IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken

IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. OpenVAS Vulnerability Test $Id:...

Anchor CMS 0.9.2 Cross Site Scripting

Affected Vendor: http://anchorcms.com/ Date: 23/03/2015 Discovered by: JoeV Type of vulnerability: XSS Tested on: Windows 7 Version: 0.9.2 Description: Anchor CMS v 0.9.2 is susceptible to Cross Site Scripting attack. Proof of Concept PoC: --------------------------- XSS --- POST...

Free MP3 CD Ripper Buffer Overflow

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Free MP3 CD Ripper All versions Local Buffer Overflow + Date: 20-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper + Friendly Sites:...

Free MP3 CD Ripper 2.6 - '.wav' Local Buffer Overflow

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Free MP3 CD Ripper All versions Local Buffer Overflow + Date: 20-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper + Friendly Sites:...

Adobe Flash Player ByteArray UncompressViaZlibVariant Use-After-Free-vulnerability warning-the black bar safety net

require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Powershell include Msf::Exploit::Remote::BrowserExploitServer def initializeinfo= superupdateinfoinfo, 'Name' = 'Adobe Flash Player ByteArray UncompressViaZlibVariant Use After Free', 'Description...

FastStone Image Viewer 5.3 .tga Crash PoC

Exploit for windows platform in category dos / poc Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...

Microsoft Windows SHA-2 Code Signing Support Vulnerability (3033929)

This host is missing an important security update according to Microsoft Advisory 3033929. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Foxit Reader 7.0.6.1126 - Unquoted Service Path Elevation Of Privilege

Exploit for windows platform in category local exploits Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, an...

Publish-It 3.6d - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Title: Publish-It 3.6d - Buffer Overflow SEH Exploit Date: 2/16/15 Vulnerability: Discovery and PoC by Core Security http://www.exploit-db.com/exploits/31461/ Exploit Author: jakx Andrew Smith of Sword & Shield Enterprise...

FastStone Image Viewer 5.3 - '.tga' Crash (PoC)

Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.faststone.org/FSViewerDownload.htm Vulnerable version :...

Microsoft Office Word 2007 - RTF Object Confusion (ASLR and DEP Bypass) Exploit

Exploit for windows platform in category local exploits Title : Microsoft Office Word 2007 - RTF Object Confusion ASLR and DEP bypass Date : 28/02/2015 Author : R-73eN Software : Microsoft Office Word 2007 Tested : Windows 7 Starter import sys Windows Message Box / all versions . Thanks to Giusep...

Spybot Search Destroy 1.6.2 Security Center Service - Local Privilege Escalation

Spybot Search Destroy 1.6.2 Security Center Service - Local Privilege Escalation Spybot Search & Destroy 1.6.2 Security Center Service Privilege Escalation Vendor: Safer-Networking Ltd. Product web page: http://www.safer-networking.org Affected version: 1.6.2 Summary: Spybot – Search & Destroy...

Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create...

Foxit Reader 7.0.6.1126 Privilege Escalation

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create...

Intel Network Adapter Diagnostic Driver - IOCTL Handling

Intel Network Adapter Diagnostic Driver - IOCTL Handling / Intel Network Adapter Diagnostic Driver IOCTL Handling Vulnerability Vendor: Intel Product webpage: http://www.intel.com Affected products: Network Adapter Driver for Windows XP Network Adapter Driver for Windows 7 Network Adapter Driver...

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege

Summary Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create free PDF creation, open, view, sign, and print any PDF file. Description The application suffers from an unquoted search path issue impacting the service 'FoxitCloudUpdateService' for Windows...

HostingTakip 3.0 Cross Site Scripting

HostingTakip v3.0 - Stored XSS Vulnerability My + Discovered by: KnocKout Contact : [email protected] HomePage : http://h4x0resec.blogspot.com Love to UnDeRTaKeR & BARCOD3 & Septemb0x & ZoRLu milw00rm.com Software info |Web App. : HostingTakip |Affected Version : v3.0 |Software :...

Microsoft SHA-2 Advisory Causing 'Infinite Loop' Issues

Problems with a security update issued this week by Microsoft have surfaced on a number of technology forums. Windows users say Microsoft Security Advisory 303929, which adds SHA-2 code-signing and verification support for Windows 7 client machines and Windows Server 2008 R2 boxes, is causing...

Adobe Flash Player ByteArray UncompressViaZlibVariant Use After Free

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ByteArray UncompressViaZlibVariant Use After Free', 'Description' = %q This module exploits an use after free...

Adobe Flash Player NetConnection Type Confusion

This module exploits a type confusion vulnerability in the NetConnection class on Adobe Flash Player. When using a correct memory layout this vulnerability allows to corrupt arbitrary memory. It can be used to overwrite dangerous objects, like vectors, and ultimately accomplish remote code...