Mediacoder 0.8.33 build 5680 - '.m3u' Buffer Overflow (PoC) (SEH Overwrite)

Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos .m3u Date: 11/29/2010 Author: Hadji Samir [email protected] Software Link: http://dl.mediacoderhq.com/files001/MediaCoder-0.8.33.5680.exe Version: 0.8.33 build 5680 EAX 0012E508 ECX 43434343 EDX 00000000 EBX 43434343 ESP...

Informatica: Missing SPF for informatica.com

Steps to reproduce: Go Here http://www.kitterman.com/spf/validate.html? Then Put informatica.com Then Click Get SPF Records if any then you will got nothing or no records. POC: http://s28.postimg.org/ofksihxyl/spf.png...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://winampplugins.co.uk/Winamp/ Vulnerable version : Winamp 5.666 build...

JetAudio 8.1.3 - '.mp4' Crash (PoC)

Exploit Title : jetAudio 8.1.3 Basic Use-after-free Corrupted mp4 Crash POC Product : jetAudio Basic Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.jetaudio.com/download/ Vulnerable version : 8.1.3 Latest at the moment an...

WordPress WP-FB-AutoConnect 4.0.5 CSRF / XSS

Title: WordPress 'WP-FB-AutoConnect' plugin - XSS/CSRF Version: 4.0.5 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/wp-fb-autoconnect/ Contacted WordPress: 2014/11/27 ----------------------------------------------------------------...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Winamp 5.666 build 3516 - Corrupted .flv Crash PoC Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...

WordPress Ajax Store Locator 1.2 Arbitrary File Download

WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability. Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356...

IceHrm <=7.1 Multiple Vulnerabilities

Summary IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted cloud solution. Description IceHrm IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page:...

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

Advertise With Pleasure! (AWP) 6.6 - SQL Injection

Exploit Title: Advertise With Pleasure! AWP = 6.6 - SQL Injection vulnerability Date: 12/02/2014 Author: Robert Cooper robertcatareyousecure.net Software Link: http://www.guruperl.net/products/awppro/ Tested on: Linux/Windows 7 Vulnerable Parameter: groupid= PoC:...

WordPress Plugin Google Document Embedder 2.5.16 - 'mysql_real_escpae_string' Bypass SQL Injection

Exploit Title : Google Document Embedder 2.5.16 mysqlrealescpaestring bypass SQL Injection Data : 2014 – 12 -03 Exploit Author : Securely Yoo Hee man Plugin : google-document-embedder Fixed version : N/A Software Link : https://downloads.wordpress.org/plugin/google-document-embedder.2.5.16.zip 1...

Google Document Embedder 2.5.16 - bypass SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Google Document Embedder 2.5.16 mysqlrealescpaestring bypass SQL Injection Data : 2014 – 12 -03 Exploit Author : Securely Yoo Hee man Plugin : google-document-embedder Fixed version : N/A Software Link :...

IPUX Cube Type CS303C IP Camera - 'UltraMJCamX.ocx' ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type ICS303C firmware: ICS303C 1.0.0-17 20140120 r1511 Summary: The...

IP. Board 3.4.5 SQL injection vulnerability in the use and analysis-vulnerability warning-the black bar safety net

I. background information First I want to introduce this web App of background information, as well as on the vulnerability of some of the basic overview: IPB Forum known as Invision Power Board（abbreviated IPB or IP. Board, is the world's most famous Forum app by PHP+MySQL architecture, 1. The X...

欧朋浏览器安卓客户端UXSS

简要描述： RT 详细说明： 自动测试的。。。测试地址： http://uxss.sinaapp.com/ poc：http://1.m4sktest.sinaapp.com/uxss/uxss1.html 漏洞证明： 自动测试的。。。测试地址： http://uxss.sinaapp.com/ img src="https://images.seebug.org/upload/201411/2120295074fe20573a272ec3fcfdcd4350121b08.pn...

IE pass to kill the remote command execution poc-vulnerability warning-the black bar safety net

! doctype html 2. html 3. meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" 4. meta http-equiv="content-type" content="text/html;charset=utf-8" 5. head 6. /head 7. body 8. For you to open Notepad and Calculator, IE Only 9. SCRIPT LANGUAGE="VBScript" 1 0. 1 1. function runmumaa 1 2. On...

KMPlayer 3.9.1.130 Denial Of Service

Exploit Title: KMPlayer 3.9.1.130 Integer division by zero DoS. Date: 25-11-2014 Author: Ajin Abraham Website: http://opensecurity.in Vendor Homepage: http://www.kmpmedia.net/ Software Link: http://filehippo.com/downloadkmplayer/download/7f497da5a4cda4032bf7e4a11c9e3131/ Version: 3.9.1.130 Tested...

TRENDnet SecurView Wireless Network Camera TV-IP422WN - 'UltraCamX.ocx' Stack Buffer Overflow (PoC)

TRENDnet SecurView Wireless Network Camera TV-IP422WN UltraCamX.ocx Stack BoF Vendor: TRENDnet Product web page: http://www.trendnet.com Affected version: TV-IP422WN/TV-IP422W Summary: SecurView Wireless N Day/Night Pan/Tilt Internet Camera, a powerful dual-codec wireless network camera with the...

Wordpress wpDataTables 1.5.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress wpDataTables 1.5.3 and below SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : http://wpdatatables.com Premium Date : 2014-11-22 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap...

WordPress wpDataTables 1.5.3 SQL Injection

Exploit Title : Wordpress wpDataTables 1.5.3 and below SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : http://wpdatatables.com Premium Date : 2014-11-22 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap 0.8-1 Linux / Mozilla Firefox Linux / sqlmap...