Результаты поиска

  1. Exploiter

    Exploit NTP 4.2.8p3 - Denial of Service

    NTP 4.2.8p3 - Denial of Service #!/usr/bin/env python # Exploit Title: ntpd 4.2.8p3 remote DoS # Date: 2015-10-21 # Bug Discovery: John D "Doug" Birdwell # Exploit Author: Magnus Klaaborg Stubman (@magnusstubman) # Website: http://support.ntp.org/bin/view/Main/NtpBug2922 # Vendor Homepage...
  2. Exploiter

    Exploit Microsoft Internet Explorer 8 - MSHTML 'SRunPointer::SpanQualifier/RunType' Out-Of-Bounds Read (MS15-009)

    Microsoft Internet Explorer 8 - MSHTML 'SRunPointer::SpanQualifier/RunType' Out-Of-Bounds Read (MS15-009) <!-- Source: http://blog.skylined.nl/20161122001.html Synopsis A specially crafted web-page can cause Microsoft Internet Explorer 8 to attempt to read data beyond the boundaries of a...
  3. Exploiter

    Exploit Disk Sorter Enterprise 9.1.12 - 'Login' Remote Buffer Overflow

    Disk Sorter Enterprise 9.1.12 - 'Login' Remote Buffer Overflow #!/usr/bin/python print "Disk Sorter Enterprise 9.1.12 Login Buffer Overflow" print "Author: Tulpa / tulpa[at]tulpa-security[dot]com" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land...
  4. Exploiter

    Exploit Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

    Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow #!/usr/bin/python print "Disk Savvy Enterprise 9.1.14 Login Buffer Overflow" print "Author: Tulpa / tulpa[at]tulpa-security[dot]com" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land you...
  5. Exploiter

    Exploit Disk Pulse Enterprise 9.1.16 - 'Login' Remote Buffer Overflow

    Disk Pulse Enterprise 9.1.16 - 'Login' Remote Buffer Overflow #!/usr/bin/python print \"Disk Pulse Enterprise 9.1.16 Login Buffer Overflow\" print \"Author: Tulpa / tulpa[at]tulpa-security[dot]com\" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land...
  6. Exploiter

    Exploit VX Search Enterprise 9.1.12 - 'Login' Remote Buffer Overflow

    VX Search Enterprise 9.1.12 - 'Login' Remote Buffer Overflow #!/usr/bin/python print "VX Search Enterprise 9.1.12 Login Buffer Overflow" print "Author: Tulpa / tulpa[at]tulpa-security[dot]com" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land you NT...
  7. Exploiter

    Exploit Morris Worm - fingerd Stack Buffer Overflow (Metasploit)

    Morris Worm - fingerd Stack Buffer Overflow (Metasploit) ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking # This is so one-off that...
  8. Exploiter

    Exploit Sync Breeze Enterprise 9.1.16 - 'Login' Remote Buffer Overflow

    Sync Breeze Enterprise 9.1.16 - 'Login' Remote Buffer Overflow #!/usr/bin/python print "Sync Breeze Enterprise 9.1.16 Login Buffer Overflow" print "Author: Tulpa / tulpa[at]tulpa-security[dot]com" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land...
  9. Exploiter

    Exploit Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow

    Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow #!/usr/bin/python print "Dup Scout Enterprise 9.1.14 Login Buffer Overflow" print "Author: Tulpa / tulpa[at]tulpa-security[dot]com" #Author website: www.tulpa-security.com #Author twitter: @tulpa_security #Exploit will land you NT...
  10. Exploiter

    Exploit Morris Worm - sendmail Debug Mode Shell Escape (Metasploit)

    Morris Worm - sendmail Debug Mode Shell Escape (Metasploit) ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'expect' class MetasploitModule < Msf::Exploit::Remote # cmd/unix/reverse spams the...
  11. Exploiter

    Exploit Core FTP LE 2.2 - 'SSH/SFTP' Remote Buffer Overflow (PoC)

    Core FTP LE 2.2 - 'SSH/SFTP' Remote Buffer Overflow (PoC) [+] Credits: John Page aka hyp3rlinx [+] Website: hyp3rlinx.altervista.org [+] Source: http://hyp3rlinx.altervista.org/advisories/CORE-FTP-REMOTE-SSH-SFTP-BUFFER-OVERFLOW.txt [+] ISR: ApparitionSec Vendor: ===============...
  12. Exploiter

    Exploit blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)

    blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit) ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include...
  13. Exploiter

    Exploit FaceTime - 'readSPSandGetDecoderParams' Stack Corruption

    FaceTime - 'readSPSandGetDecoderParams' Stack Corruption There are a variety of problems that occur when processing malformed H264 streams in readSPSandGetDecoderParams, leading to OOB read, OOB write and stack_chk crashes. I think the root cause is stack corruption. This issue can occur if...
  14. Exploiter

    Exploit osTicket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting

    osTicket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting # Exploit Title: Osticket 1.9.14 and below (X-Forwarded-For) Stored XSS. # Date: 24-11-2016 # Exploit Author: Joaquin Ramirez Martinez [ i0-SEC ] # Software Link: http://osticket.com/ # Vendor: Osticket """ ============== DESCRIPTION...
  15. Exploiter

    Exploit FaceTime - 'VCPDecompressionDecodeFrame' Memory Corruption

    FaceTime - 'VCPDecompressionDecodeFrame' Memory Corruption There is a heap corruption vulnerability in VCPDecompressionDecodeFrame which is called by FaceTime. This bug can be reached if a user accepts a call from a malicious peer. The issue can be reproduced using the attached sequence of...
  16. Exploiter

    Exploit GNU Wget < 1.18 - Access List Bypass / Race Condition

    GNU Wget < 1.18 - Access List Bypass / Race Condition ''' ============================================= - Discovered by: Dawid Golunski - dawid[at]legalhackers.com - https://legalhackers.com - https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html -...
  17. Exploiter

    Exploit Remote Utilities Host 6.3 - Denial of Service

    Remote Utilities Host 6.3 - Denial of Service # Exploit Title: Remote Utilities - Host 6.3 - Denial of Service # Date: 2016-11-25 # Exploit Author: Peter Baris # Vendor Homepage: www.remoteutilities.com # Software Link: http://saptech-erp.com.au/resources/executables/host6.3.zip # Version...
  18. Exploiter

    Exploit FaceTime - RTP Video Processing Heap Corruption

    FaceTime - RTP Video Processing Heap Corruption There is a memory corruption issue when processing a malformed RTP video stream in FaceTime that leads to a kernel panic due to a corrupted heap cookie or data abort. This bug can be reached if a user accepts a call from a malicious caller. This...
  19. Exploiter

    Exploit EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution

    EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution [+] Credits: John Page aka hyp3rlinx [+] Website: hyp3rlinx.altervista.org [+] Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt [+] ISR: ApparitionSec Vendor...
  20. Exploiter

    Exploit Crestron AM-100 - Multiple Vulnerabilities

    Crestron AM-100 - Multiple Vulnerabilities ================================================================= # Crestron AM-100 (Multiple Vulnerabilities) ================================================================= # Date: 2016-08-01 # Exploit Author: Zach Lanier # Vendor Homepage...
  21. Exploiter

    Exploit TP-LINK TDDP - Multiple Vulnerabilities

    TP-LINK TDDP - Multiple Vulnerabilities 1. Advisory Information Title: TP-LINK TDDP Multiple Vulnerabilities Advisory ID: CORE-2016-0007 Advisory URL: http://www.coresecurity.com/advisories/tp-link-tddp-multiple-vulnerabilities Date published: 2016-11-21 Date of last update: 2016-11-18...
  22. Exploiter

    Exploit I Know Where Your Page Lives - De-randomizing the latest Windows 10 Kernel

    I Know Where Your Page Lives - De-randomizing the latest Windows 10 Kernel 40822.pdf
  23. Exploiter

    Exploit D-Link DIR-Series Routers - HNAP Login Stack Buffer Overflow (Metasploit)

    D-Link DIR-Series Routers - HNAP Login Stack Buffer Overflow (Metasploit) ## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'msf/core' # Payload working status: # MIPS: # - all valid payloads...
  24. Exploiter

    Exploit NTP 4.2.8p8 - Denial of Service

    NTP 4.2.8p8 - Denial of Service #!/usr/bin/env python # Exploit Title: ntpd remote pre-auth Denial of Service # Date: 2016-11-21 # Exploit Author: Magnus Klaaborg Stubman (@magnusstubman) # Website: http://dumpco.re/cve-2016-7434/ # Vendor Homepage: http://www.ntp.org/ # Software Link...
  25. Exploiter

    Exploit Huawei UTPS - Unquoted Service Path Privilege Escalation

    Huawei UTPS - Unquoted Service Path Privilege Escalation # Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software # Date: Nov 16 2016 # Author: Dhruv Shah (@Snypter) # Website: http://security-geek.in # Contact: [email protected] # Category: local # Vendor Homepage...
Сверху Снизу