Oracle AutoVue version 20.0.1 suffers from an AutoVueX Active-X Control Export3DBom remote code execution vulnerability. Proof of concept code included.
a476abce69a258c9812ab1161a7621fbOracle AutoVue version 20.0.1 suffers from an AutoVueX Active-X Control ExportEdaBom remote code execution vulnerability. Proof of concept code included.
6834ead3ed2a6b18b030e590d1c2d407Opera use-after-free proof of concept denial of service exploit. A full analysis is provided as well.
f9b81cf3c9630e77065b0807a084ad2bOracle DataDirect multiple native wire protocol ODBC drivers HOST attribute stack based buffer overflow proof of concept exploit. Oracle Hyperion Performance Management and BI version 11.1.2.1.0 is affected.
b45ff9698e86a1f31ad62dc540c6f3a1UnrealIRCd version 3.2.8.1 local configuration stack overflow proof of concept exploit.
fb1cbf7bb5cac0840b802d12560d3dbcOpera versions 11.52 and below proof of concept stack overflow exploit.
b079250e550f9d8370daa2db5ece3245Opera versions 11.52 and below proof of concept denial of service exploit.
fe34293590459f9e2ce61f8b01aa7c63PROMOTIC version 8.1.3 suffers from an ActiveX SaveCfg stack overflow, an ActiveX AddTrend heap overflow, and a directory traversal. Details and proof of concept included.
efe9cdd1ed6f633152785788df750146Microsoft .fon extension kernel-mode buffer overrun proof of concept exploit and write-up.
85aa828467209547b6d22d3cd4fb7cd6Brief write up with a proof of concept explaining local session snooping in PHP.
eb89a38aaf8466ba830395ec99647b4bBrief write up with a proof of concept explaining local session hijacking in PHP.
03479b7c5d36d52b2ac68b55be2e72aeThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. This is a proof of concept exploit that demonstrates this vulnerability.
595c25bd025d51c132f83785da87856bDivX Plus Web Player versions 2.1.2.265 and below file:// buffer overflow proof of concept exploit.
4b1be038c32dbc8797dd3309dd57e278Google Chrome versions prior to 14.0.835.163 suffer from a PDF file handling memory corruption vulnerability. Full advisory and proof of concept pdf and code included.
c15ae3350d48b65817b382ea2653957cGenStat versions 14.1.0.5943 and below suffer from an array overflow with write2 and a heap overflow. Proof of concept code included.
7035146a73dc406ba921ccb610e5b139Cytel Studio: StatXact / LogXact / CrossOver versions 9.0.0 and below suffer from multiple stack and integer overflows. Proof of concept code included.
5707135ebec0baf7efe8e3b6b85ed840This is a proof of concept exploit that leverages the addUrl method in the DeploymentScanner module on an exposed JBoss JMX console.
5dacc755b8a3e39cc0ea4915d4ca1983Browser Exploit Against SSL/TLS, or BEAST, is a proof of concept tool that demonstrates a weakness in the SSL protocol. It allows attackers to silently decrypt data that's passing between a webserver and an end-user browser.
c0d832089612de08c6935977f7c401f5FreeBSD UIPC socket heap overflow proof of concept exploit that causes a kernel panic. Tested on FreeBSD 8.2-RELEASE.
1b84cb92aacf8ffe51fd86111e69b1c1Proof of concept Mac OS X versions prior to 10.6.7 kernel panic exploit.
2b94d4a6dc10d98c4414fd985be66fbbPytroj is a tool for infecting .pyc files with arbitrary code that spreads out to infect all other .pyc files. Pytroj is a proof of concept attack against .pyc files. It searches for other .pyc files and injects itself into them. The injected code can be any python code (in this case it prints "You have been exploited").
9b0390ff1dd1ed77efa2b13e3d076290KnFTP version 1.0.0 buffer overflow denial of service proof of concept exploit.
3bfe1bd5b29cc151d81ff1d2e30944a3Rockwell RSLogix versions 19 and below suffer from a denial of service vulnerability. Proof of concept included.
da63e8a2284c94897556356fb7ebaea2Carel PlantVisor versions 2.4.4 and below suffer from a directory traversal vulnerability. Proof of concept included.
2a5177d1a8f0a6c588f695b75f4a2e6bPragea Movicon / PowerHMI versions 11.2.1085 and below suffer from a memory corruption vulnerability. Proof of concept included.
9cab05d26437a8fe4d378b5388aae180
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed