CVE-2013-1347 Microsoft Internet Explorer 8 Vulnerability Metasploit Demo

Timeline : Watering hole campaign first reported on a private mailing list the 2013-04-30 Watering hole campaign publicly disclosed by AlienVault and Invincea the 2013-04-30 0day exploit spotted by FireEye the 2013-05-03 Microsoft Security Advisory posted the 2013-05-03 Metasploit PoC provided … Continue reading →

CVE-2013-2423 – Java 7u17 Applet Reflection Type Confusion RCE Metasploit Demo

Timeline : Vulnerability discovered and reported to vendor by Jeroen Frijters Vulnerability corrected in April CPU the 2013-04-16 Vulnerability publicly disclosed by Jeroen Frijters the 2013-04-17 Metasploit PoC provided the 2013-04-20 PoC provided by : Jeroen Frijters juan … Continue reading →

CVE-2013-1362 Nagios Remote Plugin Executor Arbitrary Command Execution Metasploit Demo

Timeline : Vulnerability discovered and reported to vendor by Rudolph Pereira Vulnerability patched by vendor the 2012-12-21 Vulnerability publicly disclosed by Rudolph Pereira the 2013-02-21 Metasploit PoC provided the 2013-03-19 PoC provided by : Rudolph Pereira jwpari Reference(s) … Continue reading →

CVE-2013-1892 MongoDB nativeHelper.apply Remote Code Execution Metasploit Demo

Timeline : Vulnerability discovered and reported to vendor by agix around 2013-03-01 Vulnerability publicly disclosed by agix the 2013-03-24 Metasploit PoC provided the 2013-03-27 PoC provided by : agix Reference(s) : CVE-2013-1892 OSVDB-91632 BID-58695 Affected version(s) : MongoDB … Continue reading →

CVE-2012-4914 Cool PDF Image Stream Buffer Overflow Metasploit Demo

Timeline : Vulnerability discovered and reported to Secunia by Francis Provencher the 2012-12-19 Vulnerability publicly disclosed by Francis Provencher the 2013-01-18 Metasploit PoC provided the 2013-03-17 PoC provided by : Francis Provencher Chris Gabriel juan vazquez Reference(s) … Continue reading →