On the use of Adobe 0day – CVE-2 0 1 4-0 5 0 2 attack behavior analysis-vulnerability warning-the black bar safety net

The other day FireEye released a use AdobeFlash new 0day attack report, and Adobe has been based on vulnerabilities released a security update. According to FireEye report, many sites will redirect visitors to the following contain a Trojan the malicious Server: Peterson Institute for...

VCDGEAR 3.50 Stack Buffer Overflow

Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code...

VCDGear 3.50 - .cue Local Stack Buffer Overflow

VCDGear 3.50 - .cue Local Stack Buffer Overflow !/usr/bin/ruby ''' Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied...

APPLE-SA-2014-02-25-3 QuickTime 7.7.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-25-3 QuickTime 7.7.5 QuickTime 7.7.5 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application...

VCDGear 3.50 - '.cue' Local Stack Buffer Overflow

!/usr/bin/ruby ''' Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to...

Apple QuickTime远程缓冲区溢出漏洞

BUGTRAQ ID: 65787 CVECAN ID: CVE-2014-1251 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows 7, Vista, XP SP2平台上QuickTime 7.7.5之前版本处理'clef'元素时存在缓冲区溢出问题，恶意制作的视频文件可导致应用意外终止或执行任意代码。 0 Apple Quicktime 7.7.5 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apple QuickTime远程内存破坏漏洞

BUGTRAQ ID: 65784 CVECAN ID: CVE-2014-1243 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows 7, Vista, XP SP2平台上QuickTime 7.7.5之前版本处理跟踪列表时存在未初始化指针问题，恶意制作的视频文件可导致应用意外终止或执行任意代码。 0 Apple Quicktime 7.7.5 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Music AlarmClock 2.1.0 Crash

------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/Music-AlarmClock/3000-23504-10419263.html Version: 2.1.0 Tested on:...

GoldMP4Player 3.3 - Buffer Overflow PoC (SEH)

Exploit for windows platform in category dos / poc --------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Gold MP4 Player 3.3 - Buffer Overflow (PoC) (SEH)

Gold MP4 Player 3.3 - Buffer Overflow PoC SEH --------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Music AlarmClock 2.1.0 - '.m3u' Crash (PoC)

------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/Music-AlarmClock/3000-23504-10419263.html Version: 2.1.0 Tested on:...

Music AlarmClock 2.1.0 - .m3u Crash (PoC)

Music AlarmClock 2.1.0 - .m3u Crash PoC ------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Gold MP4 Player 3.3 - Buffer Overflow (PoC) (SEH)

--------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Tested on: Window...

Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution

This module exploits XXE and SQL injection flaws in Symantec Endpoint Protection Manager versions 11.0, 12.0 and 12.1. When supplying a specially crafted XML external entity XXE request an attacker can reach SQL injection affected components. As xpcmdshell is enabled in the included database...

Mini HTTPD 1.21 - Stack Buffer Overflow POST Exploit

Mini HTTPd version 1.21 stack buffer overflow POST exploit for Windows XP SP3. !/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/...

SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write

This module exploits a remote arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. For targets running Windows Vista or newer the payload is written to the startup folder for all users and executed upon next user logon. For targets before Windows Vista code execution...

Mini HTTPd 1.21 Stack Buffer Overflow

!/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/ Version: 1.21 Tested on: Windows XP Professional SP3 Description: This is a...

Ultra Mini HTTPd 1.21 - POST Remote Stack Buffer Overflow (2)

Ultra Mini HTTPd 1.21 - POST Remote Stack Buffer Overflow 2 !/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/ Version: 1.21 Tested...

Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (2)

!/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/ Version: 1.21 Tested on: Windows XP Professional SP3 Description: This is a...

Catia V5-6R2013 Stack Buffer Overflow

Title: Dassault Syst�mes Catia V5-6R2013 "CATV5BackboneBus" Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on: Windows 7 & Windows XP Vulnerabilit...