Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

Netzip Classic ZIP file parsing buffer overflow

Added: 11/04/2011 BID: 46059 Background Netzip Classic is a Windows utility for downloading and decompressing files. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted ZIP file and double-clicks on the file contained in it. Resolution Do not use...

Advanced Poll 2.02 SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : “inurl:/db/admin intitle:Advanced Poll 2.02” + Category : Webapps + Severity : High +...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3. Module Options msf use...

Advanced Poll 2.02 - SQL Injection

Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Category : Webapps + Severity : High +...

Advanced Poll 2.02 SQL Injection Vulnerability

Exploit for php platform in category web applications + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced...

Web File Browser 0.4b14 - File Download

Web File Browser 0.4b14 - File Download Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip...

Web File Browser 0.4b14 File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link:...

APPLE-SA-2011-10-26-1 QuickTime 7.7.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-26-1 QuickTime 7.7.1 QuickTime 7.7.1 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted movie file may lead to an unexpected application...

jbShop SQL Injection

Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...

Malware for xbox Kinect created by 15 years old Indian researchers

Malware for xbox Kinect created by 15 years old Indian researchers Indian researchers from MalCon have created a malware that utlizes Microsoft Kinect to secretly capture pictures and upload to a picasa account. A 15year old Indian security researcher 'Shantanu Gawde' from MalCon Research has...

GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)

GFI Faxmaker Fax Viewer 10.0 build 237 - Denial of Service PoC !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Foun...

GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)

!/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th 2011 Tested on: Windows XP SP3 Professional English...

GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc)

Exploit for windows platform in category dos / poc !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

Exploit for windows platform in category local exploits $Id: cytelstudiocy3.rb 14041 2011-10-24 01:39:11Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Google Chrome Proof Of Concept

-' pigtail23 -' -' www.remoteshell.de -.OO .- OO.- OO .-/ | '-' | | | | | | | | |'-| |'| |\ -' / --' --' -----' --' --' --' --' -----' ------' ---'' October 22, 2011 Ohh nice! What u doing google? Thx 4 ur bug! 0o Google Chrome PoC, killing thread. Exploitable or only a DOS!? Found no way to...

Opera 11.51 - Use-After-Free Crash (PoC)

Opera 11.51 - Use-After-Free Crash PoC Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...

Opera 11.51 - Use-After-Free Crash (PoC)

Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link: http://malerisch.net/docs/advisories/operauseafterfreecrashpoc.html function...

Opera Use-After-Free Proof Of Concept

Bug Details Name: Opera – Use After Free - Crash PoC Vendor Website: www.opera.com Initial Notification Date: October 4th , 2011 Affected Software: Opera v11.51 and previous versions Researcher: Roberto Suggi Liverani Description The PoC Proof of Concept provided below causes a crash in the lates...

Opera <= 11.51 Use After Free Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...