Corel Software DLL Hijacking

1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Date of last update: 2015-01-06 Vendors contacted: Corel Release mode: User release 2...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

Adobe Flash Player Improper File Validation (APSB15-01: CVE-2015-0301)

An improper file validation issue has been reported in Adobe Flash Player. The vulnerability occurs when the Flash Broker application allows malicious dlls or exes files to be written to one of the whitelisted directories. such a malicious dll dropped in these directories could be used to deliver...

Exploit-Easy-RM-to-MP3-2.7.3.700

Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 This exploit works for all the file...

Mini-stream-RM-MP3-Converter

Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK http://www.securityfocus.com/bid/34494 The way exploit written is slightly different than above Vulnerability handler = "ftp://" buff1 = "D" 17418 eip = "\x7D\xA5\x04\x10" 0x1004A57D jmp esp C:\Program...

Audiotran-1.4.2.4-SEH

Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Download Vulnerable application from http://www.e-soft.co.uk/Audiotran.htm Vulnerable version Audiotran 1.4.2.4 filename = "ASL.pls" windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...

Minishare-1.5.5-Buffer-Overflow

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt Date: 11/02/2010 Author: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.4.0 - 1.5.5 shellcode = "TYVTX10X41PZ41H4A4H1TA91TAFVTZ32PZNBFZDQE02D" "QF0D13DJE1F4847029R9VNN0D668M194A0I5G5L2G3W3"...

MP3-Nator-Buffer-Overflow

Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli Credit/Bug Found By: C4SS!0 G0M3S Software Link: http://files.brothersoft.com/mp3audio/players/mp3nator.zip filename = 'crash.plf' ./msfpayload windows/exec CMD=calc EXITFUNC=seh R |...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

Mini-Stream-Ripper-2.9.7-DEP

written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys calc.exe shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

NCMedia-Sound-Editor-Pro-7.5.1-SEH-DEP

Exploit: NCMedia Sound Editor Pro v7.5.1 SEHDEP Author: b33f - http://www.fuzzysecurity.com/ OS: Windows 7 Pro SP1 probably universal across 32-bit POC - Julien Ahrens XP SP3 Software: http://www.soundeditorpro.com/ import sys, socket, struct file="MRUList201202.dat"...

BlazeDVD-Pro-player-6.1-Stack-Based-Buffer

BlazeDVD Pro player 6.1 Local stack based buffer overflow Author: PuN1sh3r Email: [email protected] Date: Mon Jul 15 03:01:37 EDT 2013 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version: 6.1 $file =...

BigAnt-Server-2.52-SP5-SEH

Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit ASLR + DEP bypass Date: 03/11/2012 Exploit Author: Lorenzo Cantoni Vendor Homepage: http://www.bigantsoft.com/ Version: BigAnt Console 2.52 SP5 Tested on: Windows 7 SP0 x86 Italian - expsrv.dll 6.0.9589 Info: Vulnerability...

ZTE Datacard MF19 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF19 0V1.0.0B04 PCWMOBILISALGV1.0.0B03 mobilis Insecure Permissions Local Privilege Escalation & PoC Local crash & DLL Hijacking Exploit mmsdllr.dll, mediaplayerdll.dll Date: 1/01/2015 Author: Hadji Samir [email protected] Link...

Huawei eSpace Desktop V200R003C00 has multiple untrusted search path vulnerabilities

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. Multiple untrusted search path vulnerabilities exist in versions prior to Huawei eSpace Desktop V200R003C00, which allow local users to execute arbitrary code and perform DLL hijacking attacks via the Trojan horse...

CVE-2011-5294

The CVE-2011-5294 issue affects Kofax e-Transactions Sender Sendbox 2.5.0.933, specifically the LEADeMail.LEADSmtp.20 ActiveX control (LTCML14n.dll 14.0.0.34). The SaveMessage method allows remote attackers to write to arbitrary files via a pathname supplied as the first argument. Multiple connec...

Ecava IntegraXor DLL Vulnerabilities

OVERVIEW Security researcher Praveen Darshanam has identified two DLL loading vulnerabilities in Ecava’s IntegraXor SCADA Server. Ecava has produced a patch that mitigates these vulnerabilities. Praveen Darshanam has tested the patch to validate that it resolves the vulnerabilities. AFFECTED...

UCell Software For ZTE Modems DLL Hijacking

/ Exploit Title: UCell Software for ZTE Modems quserex.dll Path Subversion Local Privilege Escalation Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://ucell.uz/en/subscribers/devices/modems/upgradeyourmodem Tested on: windows 7 / include BOOL WINAPI DllMain HANDLE...