Buffer Overflow in My Wifi Router Software

Hi there, I have seen a buffer overflow in My Wifi Router software version 1.0 The link of the software is available :- http://mywifirouter.software.informer.com/1.0/ Exploit :- After running the software you will see two places to enter details i.e "Hotspot Name" and "Password". To exploit this...

Immunity Canvas: MS15_051

Name| ms15051 ---|--- CVE| CVE-2015-1701 Exploit Pack| CANVAS Description| win32k.sys bServerSideWindowProc flag logic issue Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the win32k.sys driver. The bServerSideWindowProc flag on the window's handle structure is mean...

From zero to start to learn the Win32 platform buffer overflow（Part1）-bug warning-the black bar safety net

Buffer overflow is a common and we often heard of software security vulnerabilities, buffer overflow, i.e. that the data is too much to write into the memory or buffer, when a buffer within the write data is full, if you continue to write data, the data will overflow into other buffer, it will...

Immunity Canvas: LNK_EXEC

Name| lnkexec ---|--- CVE| CVE-2015-0096 Exploit Pack| CANVAS Description| lnkexec Notes| References: https://technet.microsoft.com/library/security/ms15-020 CVE Name: CVE-2015-0096 VENDOR: Microsoft NOTES: Tested on: - Windows 7 32bit - Internet Explorer 8 a popup will appear if Protected Mode...

Immunity Canvas: ELASTICSEARCH_CVE_2015_1427

Name| elasticsearchCVE20151427 ---|--- CVE| CVE-2015-1427 Exploit Pack| CANVAS Description| elasticsearchCVE-2015-1427 Notes| CVE Name: CVE-2015-1427 VENDOR: elastic Notes: Elasticsearch versions 1.3.x before 1.3.8 and 1.4.x before 1.4.3 have dynamic scripting features enabled by default using...

Crystal Player 1.99 - Memory Corruption

Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ============================== Memory Corruption Vulnerability on Crystal Player 1.9...

Exploit Pack - Open Source Security Project for Penetration Testing and Exploit Development

Exploit Pack, is an open source GPLv3 security tool, this means it is fully free and you can use it without any kind of restriction. Other security tools like Metasploit, Immunity Canvas, or Core Iimpact are ready to use as well but you will require an expensive license to get access to all the...

Immunity Canvas: CVE_2014_9222

Name| CVE20149222 ---|--- CVE| CVE-2014-9222 Exploit Pack| CANVAS Description| CVE-2014-9222 Misfortune Cookie Notes| CVE Name: CVE-2014-9222 VENDOR: Alegro Notes: This module exploits the arbitrary memory overwrite vulnerability in RomPager embedded web-server, which was originally introduced by...

Immunity Canvas: MS14_068

Name| ms14068 ---|--- CVE| CVE-2014-6324 Exploit Pack| CANVAS Description| Kerberos Checksum Vulnerability Notes| CVE Name: CVE-2014-6324 VENDOR: Microsoft MSADV: MS14-068 Repeatability: Note: Please refer to the Microsoft URLs to know exactly the conditions for when this vulnerability is...

i.Mage 1.11 - Local Crash PoC

No description provided by source. !/usr/bin/python Exploit Title:i.Mage Local Crash Poc Homepage:http://www.memecode.com/image.php Software Link:http://sourceforge.net/projects/image-editor/files/i.mage-win32-v111.exe/download Version:i.i.Mage v1.11 Win32 Release Description:i.Mage is a small an...

Immunity Canvas: MS14_070

Name| ms14070 ---|--- CVE| CVE-2014-4076 Exploit Pack| CANVAS Description| ms14070 Notes| References: https://technet.microsoft.com/en-us/library/security/ms14-070.aspx CVE Name: CVE-2014-4076 VENDOR: Microsoft NOTES: Tested on: - Windows 2003 Standard Edition x86 SP2 English Usage: Win32/MOSDEF$...

i.Mage 1.11 Local Crash Proof Of Concept

!/usr/bin/python Exploit Title:i.Mage Local Crash Poc Homepage:http://www.memecode.com/image.php Software Link:http://sourceforge.net/projects/image-editor/files/i.mage-win32-v111.exe/download Version:i.i.Mage v1.11 Win32 Release Description:i.Mage is a small and fast graphics editor slanted...

i.Hex Local Crash Proof of Concept Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title:i.Hex Local Crash Poc Homepage:http://www.memecode.com/ihex.php Software Link:www.memecode.com/data/ihex-win32-v0.98.exe Version:i.Hex-v0.98 Win32 Release Description:i.Hex is a small and free graphical Hex Editor f...

i.Mage Local Crash Proof of Concept Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title:i.Mage Local Crash Poc Homepage:http://www.memecode.com/image.php Software Link:http://sourceforge.net/projects/image-editor/files/i.mage-win32-v111.exe/download Version:i.Mage v1.11 Win32 Release Description:i.Mage...

i.Hex 0.98 - Local Crash (PoC)

i.Hex 0.98 - Local Crash PoC !/usr/bin/python Exploit Title:i.Hex Local Crash Poc Homepage:http://www.memecode.com/ihex.php Software Link:www.memecode.com/data/ihex-win32-v0.98.exe Version:i.Hex-v0.98 Win32 Release Description:i.Hex is a small and free graphical Hex Editor for Windows.. Tested...

Immunity Canvas: CITRIX_NETSCALER_SOAP

Name| citrixnetscalersoap ---|--- CVE| CVE-2014-7140 Exploit Pack| CANVAS Description| Citrix Netscaler 10.1 Soap exploit Notes| FoundBy: Console Cowboys Notes: A vulnerability exists in the SOAP handler of the web interface. A SOAP request can be crafted to trigger a memory corruption flaw,...

Immunity Canvas: DRUPAL_NAME_SQLI

Name| drupalnamesqli ---|--- CVE| CVE-2014-3704 Exploit Pack| CANVAS Description| Drupal injection exploit Notes| CVE Name: CVE-2014-3704 VENDOR: drupal.org Notes: This exploit replaces the password of 'Drupal User' with 'Drupal Password'. If uid is specified, 'Drupal User' is ignored...

Immunity Canvas: DRUPAL_NAME_SQLI_CALLBACK

Name| drupalnamesqlicallback ---|--- CVE| CVE-2014-3704 Exploit Pack| CANVAS Description| Drupal injection exploit Notes| CVE Name: CVE-2014-3704 VENDOR: drupal.org Notes: This exploit tries to open a php callback to canvas by injecting php code in Drupal's login block through the database sql...

Immunity Canvas: ORACLE_FORMS_RCE

Name| oracleformsrce ---|--- CVE| CVE-2014-4278 Exploit Pack| CANVAS Description| Oracle Forms 10g Unauthenticated Remote Code Execution Notes| Info: https://securitytracker.com/id/1031042 Repeatability: Infinite VENDOR: Oracle CVE Url: https://vulners.com/cve/CVE-2014-4278 CVE Name: CVE-2014-427...

Immunity Canvas: OSX_PARSEKEYMAPPING

Name| osxparsekeymapping ---|--- CVE| CVE-2014-4404 Exploit Pack| CANVAS Description| IOHIKeyboardMapper::parseKeyMapping local privilege escalation Notes| CVE Name: CVE-2014-4404 VENDOR: Apple Notes: Tested on: - 10.9 - 10.9.1 - 10.9.2 - 10.9.3 - 10.9.4 - 10.9.5 Repeatability: Multiple Times...