MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (PoC)

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version:...

A Token’s Tale

Posted by James Forshaw currently impersonating NT AUTHORITY\SYSTEM. Much as I enjoy the process of vulnerability research sometimes there’s a significant disparity between the difficulty of finding a vulnerability and exploiting it. The Project Zero blog contains numerous examples of complex...

Mooplayer 1.3.0 Buffer Overflow

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version: 1.3.0...

X (Formerly Twitter): Twitter Card - Parent Window Redirection

Hi, I was trying to find XSS on another website and I finally did. After that I tried share this url on Twitter to show website owner, and noticed that I can run javascript on that iframe. Javascript that I used on Twitter Card : top.window.location.href="https://google.com.tr" You can watch PoC...

UniPDF-1.1-SEH

Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC Google Dork: none Date: 01/28/2015 Exploit Author: bonze Email: [email protected] Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Redirect to: http://unipdf-converter.en.softonic.com/downlo...

Safari-8.0-OS-X-10.10

Safari 8.0 / OS X 10.10 - Crash PoC...

ManageEngine Desktop Central 9 Build 90087 - CSRF Vulnerability

Exploit for jsp platform in category web applications :8020/STATEID/1417736606982/roleMgmt.do?actionToCall=addUser&SUBREQUEST=XMLHTTP" method="POST" input type="hidden" name="newDCAu...

ManageEngine Desktop Central 9 Build 90087 - Cross-Site Request Forgery

:8020/STATEID/1417736606982/roleMgmt.do?actionToCall=addUser&SUBREQUEST=XMLHTTP" method="POST" input type="hidden" name="newADAuthUserEmail...

eYou邮件系统邮件正文存储型XSS2(内附eYouXSS影响证明)

简要描述： 新玩意儿，影响Chrome。 在测试这个XSS过程中发现一处很严重的HttpOnly COOKIE泄漏，导致邮件正文型XSS能够获取用户全部COOKIE从而进行登陆。 详细说明： 新玩意儿，影响Chrome。 在测试这个XSS过程中发现一处很严重的HttpOnly COOKIE泄漏，导致邮件正文型XSS能够获取用户全部COOKIE从而进行登陆。内有POC （wooyun上有一些关于eyou邮件正文型XSS的报告，你们给的回应全都是“已有解决方案”、“问题已知，谢谢报告”。然而测试了几所大学的邮件系统，全都没修复，感觉你们是在逗我.....） 漏洞证明：...

X360 VideoPlayer ActiveX Control 2.6 - Full ASLR & DEP Bypass Exploit

Exploit for windows platform in category remote exploits !-- Exploit Title: X360 VideoPlayer ActiveX Control RCE Full ASLR & DEP Bypass Author: Rh0 Date: Jan 30 2015 Affected Software: X360 VideoPlayer ActiveX Control 2.6 VideoPlayer.ocx Vulnerability: Buffer Overflow in Data Section Tested on:...

UniPDF 1.1 Buffer Overflow / Denial Of Service

Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC Google Dork: none Date: 01/28/2015 Exploit Author: bonze Email: [email protected] Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Redirect to: http://unipdf-converter.en.softonic.com/downlo...

Exim ESMTP GHOST Denial Of Service Exploit

Exim ESTMP denial of service exploit that leverages the GHOST glibc gethostbyname buffer overflow. The below script is a PoC exploit for the GHOST vulnerability affecting Exim SMTP servers resulting in a service crash. !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST...

UniPDF 1.1 - Crash (PoC) (SEH)

Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC Google Dork: none Date: 01/28/2015 Exploit Author: bonze Email: [email protected] Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Redirect to: http://unipdf-converter.en.softonic.com/downlo...

UniPDF 1.1 - Crash PoC (SEH overwritten)

UniPDF version 1.1 suffers from a buffer overflow vulnerability. This is a SEH overwrite denial of service proof of concept exploit. Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC Google Dork: none Date: 01/28/2015 Exploit Author: bonze Email: email protected Vendor Homepage:...

UniPDF 1.1 - Crash (PoC) (SEH)

UniPDF 1.1 - Crash PoC SEH Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC Google Dork: none Date: 01/28/2015 Exploit Author: bonze Email: [email protected] Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Redirect to:...

Exim ESMTP 4.80 - glibc gethostbyname Denial of Service

Exploit Title: Exim ESMTP GHOST DoS PoC Exploit Date: 1/29/2015 Exploit Author: 1N3 Vendor Homepage: www.exim.org Version: 4.80 or less Tested on: debian-7-7-64b CVE : 2015-0235 !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST glibc gethostbyname buffer overflow...

Remote let the phone restart count as vulnerability? At least Google says not to count-vulnerability warning-the black bar safety net

Security researchers recently announced about the Android WiFi-Direct vulnerabilities, the vulnerability can lead to Android device reboot. Google and the vulnerability is found above the Core Security of the company has been in debate about this Android vulnerability severity--in the end let the...

Exim ESMTP GHOST Denial Of Service

The below script is a PoC exploit for the GHOST vulnerability affecting Exim SMTP servers resulting in a service crash. !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST glibc gethostbyname buffer overflow http://crowdshield.com USAGE: python ghost-smtp-dos.py Escape...

CoreGraphics CCITT Memory Corruption - CVE-2014-4481

Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary code execution in the context of Mobile Safari. Usin...

CVE-2 0 1 5-0 2 3 5: Linux Glibc Ghost vulnerability allows hackers remote access to system permissions-bug warning-the black bar safety net

! t01a998ea950583688b. png Ghost vulnerability in Linux glibc library appeared on the a serious security issue, he can keep the attacker in ignorance of the system in any case remote accessoperating systemthe control authority. He is currently the CVE number for CVE-2 0 1 5-0 2 3 5 to. What is...