New Internet Explorer Zero Day Used in Targeted Attacks

There’s a new zero-day vulnerability in many of the current versions of Internet Explorer and is being used in active attacks right now. The exploit that’s in use has the ability to bypass both DEP and ASLR and researchers say it’s being used by a known APT group. Microsoft has issued an advisory...

Wireshark 1.8.12/1.10.5 - wiretap/mpeg.c Stack Buffer Overflow (Metasploit)

Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow Date: 24/04/2014 Exploit Author: j0sm1 Vendor Homepage: www.wireshark.org Software Link: http://wireshark.askapache.com/download/win32/all-versions/ Version: 'Wireshark %q This module triggers a stack buffer overflow in...

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking Exploit Title: KmPlayer 3.8.0.123 DLL Hijacking Date: 2014/04/22 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.kmplayer.com/ Software Link:...

Broken IE: full version of remote code execution 0day disclosure CVE-2 0 1 4-1 7 7 6-vulnerability warning-the black bar safety net

Microsoft today released a security Bulletin 2 9 6 3 9 8 3, it not only relates to the 6/7/8/9 Edition, also affects the latest IE10/1 1 browser, both the version of the browser is detected a remote code execution vulnerability if a user visited to the particular design through the malicious...

Microsoft Internet Explorer Use-After-Free Vulnerability Guidance

US-CERT is aware of active exploitation of a use-after-free vulnerability in Microsoft Internet Explorer. This vulnerability affects IE versions 6 through 11 and could allow unauthorized remote code execution. US-CERT recommends that users and administrators review Microsoft Security Advisory...

The new 0day vulnerability to attack is to attack Windows XP users-vulnerability warning-the black bar safety net

A new Windows kernel 0day vulnerabilities being used to attack Windows XP users. Microsoft has confirmed the vulnerability and issued a security warning. The local mention the right vulnerability is with an Adobe Reader vulnerability combined with the invasion of a Windows XP machine, the presenc...

Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow

This Metasploit module triggers a stack buffer overflow in Wireshark versions 1.8.12/1.10.5 and below by generating an malicious file. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3...

Kolibri Web Server 2.0 - GET Stack Buffer Overflow

Kolibri Web Server 2.0 - GET Stack Buffer Overflow !/usr/bin/python Exploit Title: Kolibri GET request Stack buffer Overflow Date: 25 April 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.senkas.com/kolibri/download.php Version: Kolibri 2.0...

Kolibri 2.0 Stack Buffer Overflow

!/usr/bin/python Exploit Title: Kolibri GET request Stack buffer Overflow Date: 25 April 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.senkas.com/kolibri/download.php Version: Kolibri 2.0 Tested on: Windows XP SP3, Spanish Thanks:To my wife...

InfraRecorder 0.53 Unicode Buffer Overflow

!/usr/bin/python Exploit Title: InfraRecorder Unicode Buffer Overflow Version: version 0.53 Download: http://sourceforge.net/projects/infrarecorder/files/InfraRecorder/0.53/ir053.exe/download Tested on: Windows XP sp2 Exploit Author: Osanda Malith ''' We can overwrite the nseh and seh handlers. I...

Acunetix 8 build 20120704 - Remote Stack Based Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: Acunetix Stack Based overflow Date: 24/04/14 Exploit Author: Danor Cohen An7i - http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html Vendor Homepage: http://www.acunetix.com/ Software Link:...

Acunetix 8 build 20120704 - Remote Stack Overflow

Acunetix 8 build 20120704 - Remote Stack Overflow !/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory:...

Acunetix 8 Scanner Buffer Overflow

!/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory: http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html Exploit-Author: Osanda Malith Follow...

Acunetix 8 build 20120704 - Remote Stack Overflow

!/usr/bin/python Title: Acunetix Web Vulnerability Scanner Buffer Overflow Exploit Version: 8 Build: 20120704 Tested on: Windows XP SP2 en Vendor: http://www.acunetix.com/ Original Advisory: http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html Exploit-Author: Osanda Malith Follow...

Microsoft Windows XP Operating System

Windows XP is an older version of Microsoft Windows. Microsoft ended the support for Windows XP operating system on April 8th 2014. As a result computers using the OS might become more vulnerable to security risks and viruses. There are cases in which certain traffic, although not intended for...

Media Player Classic 1.3.1752.0 / 1.3.1249.0 Memory Corruption

Exploit Title: Media Player Classic Memory Corruption Date: 2014/04/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://mpc-hc.org/ Software Link:...

Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

[security bulletin] HPSBST03001 rev.1 - HP XP P9500 Disk Array running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04240206 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04240206 Version: 1 HPSBST03001 rev....

Adobe Flash Player Regular Expression Heap Overflow

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger an memory corruption, which results in remote code execution under the context of...

Adobe Flash Player Regular Expression Heap Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...