Adobe Flash Player Shader Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Shader Buffer Overflow", 'Description' = %q This module exploits a buffer overflow vulnerability in Adobe Flash...

VLC Player 2.1.3 Memory Corruption

Exploit Title: VLCplayer memory corruption in latest Version 2.1.3 Date: 2014/05/07 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.videolan.org Software Link:...

GOM Player 2.2.57.5189 Memory Corruption

GOM Player version 2.2.57.5189 suffers from a memory corruption vulnerability. Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage:...

GOM Player 2.2.57.5189 Memory Corruption

Exploit Title: Gomplayer Memory Corruption vulnerability latest Version 2.2.57.5189 Date: 2014/05/06 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.gomlab.com Software Link:...

Python - Interpreter Heap Memory Corruption (PoC)

Title: Python Interpreter Heap Memory Corruption Date: Sun, 30 Mar 2014 20:09:44 -0400 Vulnerability Discovered By : Unknown Proof of Concept : Debasish Mandal https://twitter.com/debasishm89 Software Link: https://www.python.org/ Version: All , Fix released...

Adobe Flash Player - Integer Underflow Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Integer Underflow Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in the...

K-Lite CODEC 9.x Memory Corruption

Exploit Title: K-lite codec Version 9.x Memory corruption vulnerability Date: 2014/05/3 Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.codecguide.com Software Link: http://www.oldapps.com/k-litecodecpack.php?oldklitecodec=12328...

KM Player 3.8.0.123 Stack Buffer Overflow

Exploit Title: Kmplayer stack overflow vulnerability latest Version 3.8.0.123 Date: 2014/05/04 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.kmplayer.com Software Link:...

Emergency IE Zero Day Patch Fixes XP Systems Too

UPDATE – Microsoft announced it will release an out-of-band security update today to patch a zero-day vulnerability in Internet Explorer, and that the patch will also be made available for Windows XP machines through Automatic Update. At the same time, researchers said they are now seeing attacks...

Microsoft Patches Internet Explorer Zero-Day Vulnerability, Even for Windows XP

Microsoft had publicized widely its plans to stop supporting oldest and widely used Operating system, Windows XP after 8th April this year, which means Microsoft would no longer issue security patches for XP. A few days back, we reported about a new critical Zero-day vulnerability in all versions...

Microsoft Releases Security Update for Internet Explorer Use-After-Free Vulnerability

Microsoft has released out-of-band updates to address a critical use-after-free vulnerability in Internet Explorer versions 6 through 11, including IE versions running on Windows XP. US-CERT recommends that users and administrators review Microsoft Security Bulletin MS14-021 and apply the necessa...

Adobe Flash Player - Type Confusion Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Type Confusion Remote Code Execution", 'Description' = %q This module exploits a type confusion vulnerability foun...

Adobe Flash Player Type Confusion Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Type Confusion Remote Code Execution", 'Description' = %q This module exploits a type confusion vulnerability foun...

New Internet Explorer Zero Day Used in Targeted Attacks

There’s a new zero-day vulnerability in many of the current versions of Internet Explorer and is being used in active attacks right now. The exploit that’s in use has the ability to bypass both DEP and ASLR and researchers say it’s being used by a known APT group. Microsoft has issued an advisory...

Wireshark 1.8.12/1.10.5 - wiretap/mpeg.c Stack Buffer Overflow (Metasploit)

Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow Date: 24/04/2014 Exploit Author: j0sm1 Vendor Homepage: www.wireshark.org Software Link: http://wireshark.askapache.com/download/win32/all-versions/ Version: 'Wireshark %q This module triggers a stack buffer overflow in...

Broken IE: full version of remote code execution 0day disclosure CVE-2 0 1 4-1 7 7 6-vulnerability warning-the black bar safety net

Microsoft today released a security Bulletin 2 9 6 3 9 8 3, it not only relates to the 6/7/8/9 Edition, also affects the latest IE10/1 1 browser, both the version of the browser is detected a remote code execution vulnerability if a user visited to the particular design through the malicious...

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking Exploit Title: KmPlayer 3.8.0.123 DLL Hijacking Date: 2014/04/22 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.kmplayer.com/ Software Link:...

Microsoft Internet Explorer Use-After-Free Vulnerability Guidance

US-CERT is aware of active exploitation of a use-after-free vulnerability in Microsoft Internet Explorer. This vulnerability affects IE versions 6 through 11 and could allow unauthorized remote code execution. US-CERT recommends that users and administrators review Microsoft Security Advisory...

The new 0day vulnerability to attack is to attack Windows XP users-vulnerability warning-the black bar safety net

A new Windows kernel 0day vulnerabilities being used to attack Windows XP users. Microsoft has confirmed the vulnerability and issued a security warning. The local mention the right vulnerability is with an Adobe Reader vulnerability combined with the invasion of a Windows XP machine, the presenc...

Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow

This Metasploit module triggers a stack buffer overflow in Wireshark versions 1.8.12/1.10.5 and below by generating an malicious file. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3...