Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation (MS16-125)

Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation MS16-125 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=887 Windows: Diagnostics Hub DLL Load EoP Platform: Windows 10 10586, not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: The fix...

Windows/x64 - WinExec() Shellcode (93 bytes)

/ Title : Windows x64 WinExec shellcode Date : 15-10-2016 Author : Roziul Hasan Khan Shifat size : 93 bytes Tested on : Windows 7 Ultimate x64 / / Disassembly of section .text: 0000000000000000 : 0: 99 cltd 1: 65 48 8b 42 60 mov %gs:0x60%rdx,%rax 6: 48 8b 40 18 mov 0x18%rax,%rax a: 48 8b 70 10 mo...

iWisoft Free Video Downloader 2.1 DLL Hijacking

i?Document Title: =============== iWisoft Free Video Downloader 2.1 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-05 Vulnerability Disclosure Timeline: ================================== 2016-10-05 : Discovery of the Vulnerability 2016-10-05 : Contact the Vendor No Response...

Evernote 6.1.2.2292 DLL Hijacking

Aloha, Summary Evernote contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to some DLL file is loaded by 'Evernote6.1.2.2292.exe' improperly. And it allows an attacker to load...

iWisoft Video Converter 1.2 DLL Hijacking

i?Document Title: =============== iWisoft Video Converter 1.2 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-04 Vulnerability Disclosure Timeline: ================================== 2016-10-04 : Discovery of the Vulnerability 2016-10-04 : Contact the Vendor No Response 2016-10-...

MP3 Stream Editor 3.4 - DLL Hijacking Vulnerability

Document Title: =============== MP3 Stream Editor 3.4 - DLL Hijacking Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1971 Release Date: ============= 2016-10-07 Vulnerability Laboratory ID VL-ID: ==================================== 1971...

MP3 Stream Editor 3.4 - DLL Hijacking Vulnerability

Document Title: =============== MP3 Stream Editor 3.4 - DLL Hijacking Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1971 Release Date: ============= 2016-10-06 Vulnerability Laboratory ID VL-ID: ==================================== 1971...

AuraDVD Ripper Professional 1.6.3 DLL Hijacking

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

Aura Video Converter 1.6.3 DLL Hijacking

Document Title: =============== Aura Video Converter v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit) Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

Windows Capcom.sys Kernel Execution Exploit (x64 only)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'Windows Capcom.sys Kernel Execution Exploit x64 only',...

Windows Capcom.sys Kernel Execution Exploit (x64 only)

This Metasploit module abuses the Capcom.sys kernel driver's function that allows for an arbitrary function to be executed in the kernel from user land. This function purposely disables SMEP prior to invoking a function given by the caller. This has been tested on Windows 7 x64. This module...

Street Fighter 5 - Capcom.sys Kernel Execution (Metasploit)

Street Fighter 5 - Capcom.sys Kernel Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Flv Player 2011 1.3 DLL Hijacking

Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Vulnerability Release Date: ============= 2016-09-23 Vulnerability Disclosure Timeline: ================================== 2016-09-30 : Public Disclosure Product & Service Introduction: =============================== FLV Player...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'Windows Capcom.sys Kernel Execution Exploit x64 only',...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ===================================...

Snort 2.9.7.0-WIN32 DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txt + ISR: ApparitionSec Vendor: ============= www.snort.org Product: =================== Snort v2.9.7.0-WIN32 Snort is an open-source, free and lightweight...