Static HTTP Server 1.0 - Local Overflow (SEH)

!/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators Exploit/Advisoryhttp://infosec42.blogspot.com/ SoftwareStatic HTTP Serve...

Static HTTP Server 1.0 - Local Overflow (SEH)

Static HTTP Server 1.0 - Local Overflow SEH !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...

HexChat 2.9.4 - Local Overflow

HexChat 2.9.4 - Local Overflow !/usr/bin/python HexChat 2.9.4 Local Exploit Bug found by Jules Carter Exploit by Matt "hostess" Andreko http://www.mattandreko.com/2013/04/buffer-overflow-in-hexchat-294.html junk1 = "B"30 shellcode = msfvenom -p windows/messagebox EXITFUNC=process BufferRegister=E...

HexChat 2.9.4 - Local Overflow

!/usr/bin/python HexChat 2.9.4 Local Exploit Bug found by Jules Carter Exploit by Matt "hostess" Andreko http://www.mattandreko.com/2013/04/buffer-overflow-in-hexchat-294.html junk1 = "B"30 shellcode = msfvenom -p windows/messagebox EXITFUNC=process BufferRegister=ESP -e x86/alphamixed -f c...

Oracle VM VirtualBox 3.x / 4.0.x < 4.0.10 Local Integer Overflows

The remote host contains a version of Oracle VM VirtualBox or Sun xVM VirtualBox 3.0, 3.1, 3.2, or 4.0.x prior to 4.0.10. As such, it is reportedly affected by two vulnerabilities : - A local user can exploit a flaw in Guest Additions for Windows to gain partial elevated privileges. This issue on...

PHP 6.0 openssl_verify() Buffer Overflow

// // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICODE "AAA...." // EIP 00410041 // //...

Lattice Semiconductor PAC-Designer 6.21 - '.PAC' Local Overflow

!/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP SP1 Software:...

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen -...

BlazeVideo HDTV Player 6.6 Professional - Local Overflow (SEH + ASLR + DEP Bypass)

!/usr/bin/python -w ----------------------------------------------------------------------------------- Exploit: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR Author: b33f - http://www.fuzzysecurity.com/ OS: Tested on Windows 7 32-bit PRO SP1 Software Link:...

DVD X Player 5.5 Pro - Local Overflow (SEH + ASLR + DEP Bypass)

DVD X Player 5.5 Pro - Local Overflow SEH + ASLR + DEP Bypass ?php / Title: DVD X Player 5.5 Pro DEP + ASLR Bypass Exploit Date: Sep 08, 2011 Author: Rew [email protected] Discovered by: Blake http://www.exploit-db.com/exploits/17788/ Link: http://www.dvd-x-player.com/download/DVDXPlayerSetup.exe...

DVD X Player 5.5 Pro - Local Overflow (SEH + ASLR + DEP Bypass)

?php / Title: DVD X Player 5.5 Pro DEP + ASLR Bypass Exploit Date: Sep 08, 2011 Author: Rew [email protected] Discovered by: Blake http://www.exploit-db.com/exploits/17788/ Link: http://www.dvd-x-player.com/download/DVDXPlayerSetup.exe Tested on: WinXP Pro SP3 + OptOut DEP CVE: NA 0day DEP bypass...

Wireshark 1.4.1 1.4.4 - Local Overflow (SEH)

Wireshark 1.4.1 1.4.4 - Local Overflow SEH !/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5...

Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)

!/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5 DO NOT FORGET TO FEEL THE PWNSAUCE WITH:...

MPlayer Lite r33064 - '.m3u' Local Overflow (SEH)

!/usr/bin/perl +Exploit Title: Exploit Buffer Overflow MsplayerSEH +Date: 19\03\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On: WIN-XP SP3 +CVE: N/A...

CodeBlocks 8.02 - 'cbp' Local Buffer Overflow

!/usr/bin/python import sys,os,shutil if lensys.argv != 3: print "------------------------------------------------" print "CodeBlocks cbp Buffer Overflow Exploit " print "Usage : exploit.py " print "Example : exploit.py sploitproj c:\proj\ " print "By : sup3r " print...

Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)

Nokia MultiMedia Player 1.0 - Local Overflow SEH Unicode Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp...

Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)

Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8...

Digital Music Pad 8.2.3.4.8 - '.pls' Local Overflow (SEH)

Digital Music Pad Version 8.2.3.4.8 SEH overflow Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerable version DJ Studio Pro Version 8.2.3.4.8 Tested on XP SP2 !/usr/bin/python filenam...

iworkstation 9.3.2.1.4 - Local Overflow (SEH)

iworkstation 9.3.2.1.4 - Local Overflow SEH iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.sharewareplaza.com/iworkstation-downloads68989.html Vulnerable version iworkstation Version 9.3.2.1.4 Tested on XP SP2...

iworkstation 9.3.2.1.4 - Local Overflow (SEH)

iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.sharewareplaza.com/iworkstation-downloads68989.html Vulnerable version iworkstation Version 9.3.2.1.4 Tested on XP SP2 Greets Puneet Jain my $head =...