CVE-2011-1854

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

Microsoft WINS Service Failed Response Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Internet Name Service WINS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wins.exe service distributed with Microsoft Windows...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

MS11-035: Vulnerability in WINS Could Allow Remote Code Execution (2524426)

The version of WINS Windows Internet Name Service installed on the remote Windows host is affected by a memory corruption vulnerability due to a logic error when handling a socket send exception. By sending specially crafted packets to the affected WINS system, a remote attacker can potentially...

JBoss Seam privilege escalation caused by EL interpolation in FacesMessages

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...

ZDI-11-125: Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability

ZDI-11-125: Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-125 April 12, 2011 -- CVE ID: CVE-2011-0656 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Microsoft -- Affected Products: Microsoft...

Microsoft PowerPoint TimeCommandBehaviorContainer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how...

IrfanView 4.28 - ICO With Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...

GOM Player 2.1.28.5039 Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: GOM Player 2.1.28.5039 App Url: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html GOM.exe MD5: 2ba5eeb4b4793ac90bb1ed8a3b28e497 04BA6CA9 8B4E 50 MOV ECX,DWORD PT...

Windows Explorer 6.0.2900.5512 (Shmedia.dll 6.0.2900.5512) AVI Preview

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url:...

Media Player Classic Home Cinema 1.5.0.2827 Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: Media Player Classic - Home Cinema 1.5.0.2827 App Url: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html mpc-hc.exe MD5: fef81badedc176bef15bdd5d7ea2b476 DoS is...

Microsoft Windows Explorer 6.0.2900.5512 - 'Shmedia.dll 6.0.2900.5512' AVI Preview Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url: http://www.micro$oft.com Shmedia.dll 6.0.2900.5512 MD5:...

GOM Player 2.1.28.5039 - AVI Denial of Service (PoC)

GOM Player 2.1.28.5039 - AVI Denial of Service PoC done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: GOM Player 2.1.28.5039 App Url: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html GOM.exe MD5:...

Microsoft Windows Explorer 6.0.2900.5512 - Shmedia.dll 6.0.2900.5512 AVI Preview Denial of Service (PoC)

Microsoft Windows Explorer 6.0.2900.5512 - Shmedia.dll 6.0.2900.5512 AVI Preview Denial of Service PoC done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.551...

GOM Player 2.1.28.5039 - AVI Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: GOM Player 2.1.28.5039 App Url: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html GOM.exe MD5: 2ba5eeb4b4793ac90bb1ed8a3b28e497 04BA6CA9 8B4E 50 MOV ECX,DWORD PT...

MPlayer Lite M3U Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in MPlayer Lite r33064, caused by improper bounds checking of an URL entry. By persuading the victim to open a specially-crafted .M3U file, specifically by drag-and-dropping it to the player, a remote attacker can execute arbitrary...

AVIPreview 0.26 Alpha Denial of Service

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5:...

AVIPreview 0.26 Alpha Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7 DoS is caused by Access Violation...