VideoCharge Studio 2.12.3.685 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested on: Windows XP SP2 Poc...

CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service (PoC)

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service PoC Exploit Title: Denial of service in ASF demux for VLC 2.0.X Date: 01/10/2013 Exploit Author: Pedro Ribeiro Vendor Homepage: http://www.videolan.org/vlc/ Software Link: http://www.videolan.org/vlc/download Version: 2.0.0 - 2.0.8...

FiberHome Modem Router HG-110 Authentication Bypass

Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote Change DNS Servers Example file...

WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection

Exploit Title: WHMCS 5.2.8 SQL Injection Google Dork: "powered by WHMCS" Date: 10/18/2013 Exploit Author: g00n Xploiter.net Vendor Homepage: http://www.whmcs.com/ Software Link: http://www.whmcs.com/ Version: 5.2.8 Tested on: Windows, Linux Vulnerable file: /includes/dbfunctions.php POC:...

OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability

Document Title: =============== OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1110 Release Date: ============= 2013-10-12 Vulnerability Laboratory ID VL-ID:...

Internet Haut Debit Mobile Buffer Overflow SEH

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:Internet Haut Debit Mobile Buffer Overflow SEH Software Link:https://app.box.com/s/4h9cm20hp5iiask8rwrm Poc video demo :http://www.youtube.com/watch?v=sAHfjmNHiow&feature=youtu.be Version:PCWMATMARV1.0.0B03 Dat...

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow (PoC)

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow PoC Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS...

Apple Motion 5.0.7 Integer Overflow Vulnerability

No description provided by source. Apple Motion Integer Overflow Vulnerability =========================================== Vendor: Apple http://www.apple.com Software: Motion 5.0.7 Testcase verified on: OS X 10.8 Credit: Jean Pascal Pereira [email protected] DESCRIPTION =========== An integer...

davfs2 1.4.6/1.4.7 - Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits davfs2 1.4.6/1.4.7 local privilege escalation exploit Bug Description: davfs2 is a Linux utility which allows OS users to mount a remote webdav server as a local partition. The bug is well documented at...

ALLPlayer Local Buffer Overflow PoC UNICODE

Exploit for windows platform in category dos / poc Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSION...

ALLPlayer 5.6.2 Buffer Overflow

Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS AFFECTED ---- ALLPlayer 5.6.2 2Proof of Concept...

Apple Motion 5.0.7 Integer Overflow Vulnerability

An integer overflow vulnerability has been identified in Apple Motion. The issue has been verified for Motion 5.0.7 current release. Prior versions may also be affected. An attacker has the possibility to provide a crafted .motn file containing a viewer element with a subview attribute. If the...

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System:...

KMPlayer 3.7.0.109 - '.wav' Crash (PoC)

Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS. Date: 29-9-2013 Exploit Author: xboz Vendor Homepage: http://www.kmpmedia.net/ Software Link: http://update.kmpmedia.net/player/download/28 Version: 3.7.0.109 Tested on: Windows 7,8 header =...

Code Sector TeraCopy 2.3 Integer Overflow

!J:\Perl\bin\perl.exe TeraCopy 2.3 default.mo Language File Integer Overflow Vulnerability Vendor: Code Sector Product web page: http://www.codesector.com Affected version: 2.27 and 2.3 beta 2 Summary: TeraCopy is designed to copy and move files at the maximum possible speed. It skips bad files...

Vino VNC Server 3.7.3 - Persistent Denial of Service

Trustwave SpiderLabs Security Advisory TWSL2013-028: Persistent Denial of Service Vulnerability in Vino VNC Server Published: 09/16/13 Version: 1.0 Vendor: The GNOME Project https://wiki.gnome.org/Vino Product: Vino VNC Server Version affected: Vino VNC Server 3.7.3 and earlier versions 3.8 stabl...

freeFTPd 1.0.10 (PASS Command) - SEH Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV != 2 "Usage $0 host...

Win32k Memory Allocation Vulnerability(MS13-053)

No description provided by source. / more detials: https://labs.mwrinfosecurity.com/blog/2013/09/06/mwr-labs-pwn2own-2013-write-up-kernel-exploit/ this poc is written by 0xBigBan / include windows.h define NtUserMessageCall 0x11ea //on win7 sp1 x86 void SystemCallDWORD ApiNumber, ... asm lea edx,...

Ofilter Player 1.2.0.1 Buffer Overflow

Exploit Title : Ofilter Player Version 1.2.0.1 - skin1.ini - SEH Based Buffer Overflow PoC Date : 12-09-2013 Exploit Author : gunslinger Author Homepage : http://www.cr0security.com Software Link : http://download.cnet.com/Ofilter-Player/3000-21394-78232.html Price : Free to try; $19.99 to buy...