Section: .. / 0909-exploits /
| /// File Name: |
0909-exploits.tgz |
Description:
|
This archive contains all of the 313 exploits added to Packet Storm in September, 2009.
| | Homepage: | http://packetstormsecurity.org/ | | File Size: | 999273 | | Last Modified: | Oct 1 21:58:33 2009 |
| MD5 Checksum: | f6224b9b8434137d5c647c5b24d2452f |
|
| /// File Name: |
CVE-2009-0927_package.zip |
Description:
|
Adobe Reader Collab.getIcon() buffer overflow exploit.
| | Author: | Kralor | | File Size: | 170016 | | Related CVE(s): | CVE-2009-0927 | | Last Modified: | Sep 3 10:22:05 2009 |
| MD5 Checksum: | 4cce506924a5ac785d4dae13690d8666 |
|
| /// File Name: |
Avaya_Intuity_Remote_Command_Execut..> |
Description:
|
The Avaya Intuity Audix LX suffers from remote command execution, cross site scripting, and cross site request forgery vulnerabilities.
| | Author: | pagvac | | File Size: | 136376 | | Last Modified: | Sep 19 13:26:17 2009 |
| MD5 Checksum: | 3fa63cbcbe9243da5288688f70d747c5 |
|
| /// File Name: |
pemmm-overflow.txt |
Description:
|
Portable E.M Magic Morph version 1.95b stack buffer overflow proof of concept exploit that creates a malicious .mor file.
| | Author: | fl0 fl0w | | Homepage: | http://fl0-fl0w.docspages.com/ | | File Size: | 19976 | | Last Modified: | Sep 14 23:39:47 2009 |
| MD5 Checksum: | 591894907228c6edc4ea3f50a0301c81 |
|
| /// File Name: |
winplot-overflow.txt |
Description:
|
Winplot local buffer overflow exploit that creates a malicious .wp2 file.
| | Author: | Rick | | File Size: | 18521 | | Last Modified: | Sep 21 14:05:03 2009 |
| MD5 Checksum: | 3ba6ffc57ccb8a45004f2ffc17162a28 |
|
| /// File Name: |
smb2_negotiate_func_index.rb.txt |
Description:
|
This Metasploit module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates (not RTM), and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw.
| | Author: | laurent gaffie | | File Size: | 14186 | | Related OSVDB(s): | 57799 | | Related CVE(s): | CVE-2009-3103 | | Last Modified: | Sep 29 17:36:39 2009 |
| MD5 Checksum: | bd62fbcf8cbf9573b7dfd23935b5cdb8 |
|
| /// File Name: |
enlightenment.tgz |
Description:
|
Enlightenment is an exploit framework that takes advantage of the Linux NULL pointer dereference vulnerability.
| | Author: | Brad Spengler | | File Size: | 12933 | | Last Modified: | Sep 10 13:57:23 2009 |
| MD5 Checksum: | 6b08a0851dddde6eaf857e2e02d94231 |
|
| /// File Name: |
herosp-overflow.txt |
Description:
|
Hero Super Player 3000 buffer overflow proof of concept exploit that creates a malicious .m3u file.
| | Author: | fl0 fl0w | | Homepage: | http://fl0-fl0w.docspages.com/ | | File Size: | 11726 | | Last Modified: | Sep 16 02:31:32 2009 |
| MD5 Checksum: | e7eeae700772eacdaa494ee9588d9d7c |
|
| /// File Name: |
zeroboard41-exec.txt |
Description:
|
Zeroboard version 4.1 pl7 remote code execution exploit that generates a php shell.
| | Author: | jang kyoungchip | | File Size: | 11300 | | Last Modified: | Sep 4 14:47:46 2009 |
| MD5 Checksum: | e82c18425632121c33f843e7bd7efe3b |
|
| /// File Name: |
ytnef-traverseoverflow.txt |
Description:
|
The yTNEF and the Evolution TNEF attachment decoders suffer from directory traversal and buffer overflow vulnerabilities. Evolution version 2.62.2 and yTNEF version 2.6 are both affected.
| | Author: | Yorick Koster | | Homepage: | http://www.akitasecurity.nl/ | | File Size: | 10869 | | Last Modified: | Sep 7 11:27:40 2009 |
| MD5 Checksum: | 754a04c4184ac96928756b19bfd3cc68 |
|
| /// File Name: |
flatpress-exec.txt |
Description:
|
FlatPress versions 0.804 through 0.812.1 are vulnerable to a local file inclusion vulnerability that allows for remote command execution.
| | Author: | Giuseppe Fuggiano | | File Size: | 10862 | | Last Modified: | Sep 29 17:21:02 2009 |
| MD5 Checksum: | 62a2749aa60d5266fdcedba67c735356 |
|
| /// File Name: |
netcache-dos.txt |
Description:
|
NetCache proxies set up the Speedy Argentina ISP appear to be vulnerable to a denial of service condition.
| | Author: | Buanzo | | File Size: | 10024 | | Last Modified: | Sep 2 22:14:54 2009 |
| MD5 Checksum: | eb2245ed58c7c1cd988f82fc41876447 |
|
| /// File Name: |
CORE-2009-0820.txt |
Description:
|
Core Security Technologies Advisory - A vulnerability has been found in Dnsmasq that may allow an attacker to execute arbitrary code on servers or home routers running dnsmasq with the TFTP service enabled.
| | Homepage: | http://www.coresecurity.com/corelabs/ | | File Size: | 9969 | | Related CVE(s): | CVE-2009-2957, CVE-2009-2958 | | Last Modified: | Sep 1 23:32:31 2009 |
| MD5 Checksum: | d8dcb6b97e9b9158877c7826cf07171c |
|
| /// File Name: |
chromeopera-xss.txt |
Description:
|
Small write-up discussing how to exploit Chrome's and Opera's ATOM/RSS reader with script execution.
| | Author: | Inferno from Secure Thoughts | | File Size: | 7861 | | Last Modified: | Sep 16 03:38:30 2009 |
| MD5 Checksum: | 1943f2414a304182d13e522803fa5077 |
|
| /// File Name: |
scip-cp.txt |
Description:
|
Check Point Connectra R62 suffers from a login script injection vulnerability.
| | Author: | Stefan Friedli | | Homepage: | http://www.scip.ch/ | | File Size: | 6998 | | Last Modified: | Sep 21 18:29:13 2009 |
| MD5 Checksum: | deeb715df2274e284936108fe7698210 |
|
| /// File Name: |
mmp3studio-overflow.txt |
Description:
|
Millenium MP3 Studio local universal buffer overflow exploits that create malicious .pls, .mpf, and .m3u files.
| | Author: | HACK4LOVE | | Related Exploit: | milleniummp3studio-overflow.txt | | File Size: | 6587 | | Last Modified: | Sep 10 13:54:59 2009 |
| MD5 Checksum: | 932dcb5fbee0cf3052245c1c336ed697 |
|
| /// File Name: |
phpnuke80-sqlexec.txt |
Description:
|
PHP-Nuke versions 8.0 and below suffers from a remote SQL injection vulnerability that allows for remote command execution.
| | Author: | Inj3ct0r | | Homepage: | http://Inj3ct0r.com/ | | File Size: | 6551 | | Last Modified: | Sep 1 17:42:00 2009 |
| MD5 Checksum: | cdbc52450076c79386f007838ef8ed6f |
|
|
|
|
|