Microsoft to Issue Seven Bulletins, One Critical, on Patch Tuesday

Microsoft plans to issue seven security bulletins in the January Patch Tuesday release next week, fixing six vulnerabilities rated important and one rated critical. The bugs affect a variety of products, including Windows XP, Vista, Windows 7, Server 2003 and 2008 and Microsoft Developer Tools an...

TinyWebGallery 1.8.3 - Remote Command Execution

TinyWebGallery 1.8.3 - Remote Command Execution » TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a...

TinyWebGallery 1.8.3 - Remote Command Execution

» TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a » --- Category: php » --- Tested on: wind xp...

under windows ie_iepeers. dll after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Vulnerability details please view: ms10018, the http://technet.microsoft.com/en-us/security/bulletin/MS10-018 The key, if metasploit was not this exploit, where you can download: http://www.rec-sec.com/index.php Here also posted about it: this ruby code is saved directly to the...

Netcut 2.0 Denial Of Service

!/usr/bin/env python Exploit Title: Netcut Denial of Service Vulnerability Author: MaYaSeVeN Blog: http://mayaseven.blogspot.com PoC: Video http://www.youtube.com/user/mayaseven Picture http://3.bp.blogspot.com/-GcwpOXx7ers/TwGVoyj8SmI/AAAAAAAAAxs/wSGL1tKGflc/s1600/a.png Version: Netcut 2 Softwar...

Netcut 2.0 - Denial of Service

!/usr/bin/env python Exploit Title: Netcut Denial of Service Vulnerability Author: MaYaSeVeN Blog: http://mayaseven.blogspot.com PoC: Video http://www.youtube.com/user/mayaseven Picture http://3.bp.blogspot.com/-GcwpOXx7ers/TwGVoyj8SmI/AAAAAAAAAxs/wSGL1tKGflc/s1600/a.png Version: Netcut 2 Softwar...

Netcut 2.0 Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Netcut Denial of Service Vulnerability Author: MaYaSeVeN Greetz: Inj3ct0r 1337day Exploit DataBase 1337day.com Blog: http://mayaseven.blogspot.com PoC: Video http://www.youtube.com/user/mayaseven Picture...

CVE-2011-5046

The Graphics Device Interface GDI in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers...

Microsoft Windows Server Service Remote Code Execution Vulnerability (921883)

This host is missing important security update according to Microsoft Bulletin MS06-040. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Phonebook (.pbk) Remote Access DoS Vulnerability

Exploit for windows platform in category dos / poc Name: Remote Access Phonebook .pbk DoS Vulnerability Type: Windows Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows XP SP3 EN Exploit: 1- Create network connections 2- Open pbk file with text editors and replace this code...

CoCSoft Stream Down 6.8.0 - Universal (Metasploit)

CoCSoft Stream Down 6.8.0 - Universal Metasploit $Id: streamdownBOF.rb 1 2011-12-18 $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CoCSoft Stream Down 6.8.0 - Universal (Metasploit)

$Id: streamdownBOF.rb 1 2011-12-18 $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090)

VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability MS11-090 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows is a series of software operating systems and...

Windows Media Player 11.0.5721.5262 Denial Of Service

import socket, binascii print "\n" print "----------------------------------------------------------------" print "| WMP11 Remote Null Pointer |" print "| Level, Smash the Stack |" print "| Windows XP SP3 x86, Windows Media Player v11.0.5721.5262 |" print "| Windows 7 SP2 x64, Windows Media Playe...

Microsoft Windows Media Player 11.0.5721.5262 - Remote Denial of Service

Microsoft Windows Media Player 11.0.5721.5262 - Remote Denial of Service import socket, binascii print "\n" print "----------------------------------------------------------------" print "| WMP11 Remote Null Pointer |" print "| Level, Smash the Stack |" print "| Windows XP SP3 x86, Windows Media...

Windows Media Player v11.0.5721.5262 Remote Denial Of Service

Exploit for windows platform in category dos / poc import socket, binascii print "\n" print "----------------------------------------------------------------" print "| WMP11 Remote Null Pointer |" print "| Level, Smash the Stack |" print "| Windows XP SP3 x86, Windows Media Player v11.0.5721.5262...

Adobe Reader U3D Heap Overflow

Added: 12/21/2011 CVE: CVE-2011-2462 BID: 50922 OSVDB: 77529 Background Adobe Reader is free software for viewing PDF documents. Problem A heap memory corruption vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to an input validation error while parsing Universal 3D U3D file...

Fedora Update for ejabberd FEDORA-2011-16282

Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2011-16282 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Enterasys NetSight nssyslogd.exe Buffer Overflow

This module exploits a stack buffer overflow in Enterasys NetSight. The vulnerability exists in the Syslog service nssylogd.exe when parsing a specially crafted PRIO from a syslog message. The module has been tested successfully on Enterasys NetSight 4.0.1.34 over Windows XP SP3 and Windows 2003...

Microsoft Windows CSRSS本地权限提升漏洞(MS11-097)

BUGTRAQ ID: 50972 CVE ID: CVE-2011-3408 csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。 Microsoft Windows CSRSS在实现上存在本地权限提升漏洞，成功利用后可允许本地攻击者以管理员权限执行任意代码。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 7 厂商补丁： Microsoft...