Apple QuickTime Player 7.7.2 - Crash (PoC)

!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...

Microsoft Word 2010 - Crash (PoC)

Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- StackOverflow during the handling ...

Vm86 - Syscall Task Switch Kernel Panic (Denial of Service) Privilege Escalation

Vm86 - Syscall Task Switch Kernel Panic Denial of Service Privilege Escalation Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/ Introduction Problem description: The initial observation was, that the linux vm86 syscall, which allows to use the virtual-8086 mode from...

Vm86 - Syscall Task Switch Kernel Panic Denial of Service / Privilege Escalation

Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/ Introduction Problem description: The initial observation was, that the linux vm86 syscall, which allows to use the virtual-8086 mode from userspace for emulating of old 8086 software as done with dosemu, was prone to...

Subrion CMS 2.2.1 XSS / CSRF / SQL Injection

Advisory ID: HTB23113 Product: Subrion CMS Vendor: The Subrion development team Vulnerable Versions: 2.2.1 and probably prior Tested Version: 2.2.1 Vendor Notification: September 5, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting CWE-79,...

BestPlay v4.1 (.mp3) Crash PoC

Exploit for windows platform in category local exploits Exploit Title: BestPlay v4.1 .mp3 Crash PoC Version: 4.1 Date: 2012-10-18 Software Link: http://www.procesualitatea.ro/bestplay/ Author: LolzSec Tested on: Windows XP SP3 Greeting To : Da'One !/usr/bin/python file="Crash.mp3" crash="\x41"...

Microsoft Windows Media Player 10 - '.avi' Integer Division By Zero Crash (PoC)

!/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title : Windows Media Player 10 - .avi Integer Division By Zero Vulnerability Auth...

Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash (PoC)

Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash PoC !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title ...

QQPlayer 3.7.892 Heap Pointer Overwrite

Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC Date: 10/14/2012 Author: James Ritchey Vendor Homepage: www.qq-player.com Software Link: http://www.qq-player.com/downloaden.php Version: 3.7.892 Tested on: Windows XP SP3 l = 3315716 "A" s1 = 0,'\x00\x00\x01\xba', 2048,...

Family Connections CMS v2. 5. 0-v2. 7. 1 (less.php) remote command execution exploit-vulnerability warning-the black bar safety net

Author: TPCS From: 90sec Blog: http://blog.163.com/jianshitianxiaao/ 0x01 introduction Recently in practice some PoC, to find this old cave to practice hand, the first PoC released is in the exploitDB on, just not posted the link, we go to search under it. A start to get to the original PoC, want...

Joomla! < 1.5.12 跨站脚本执行和信息泄露漏洞

CVE ID: CVE-2011-4911 Joomla!是一款开放源码的内容管理系统CMS。 Joomla! 1.5.12之前版本没有在某些文件中执行JEXEC检查，可允许远程攻击者获取安装路径。 0 Joomla! 1.5.12 厂商补丁： Joomla! ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.joomla.org/ / PoC: XSS Joomla 1.5.11 Juan Galiana Lara Internet Security Auditors Jun 2009 / / conf...

SQL Injection Vulnerability in OrangeHRM

High-Tech Bridge Security Research Lab discovered SQL injection vulnerability in OrangeHRM, which could be exploited to alter SQL requests to application's database. 1 SQL Injection Vulnerability in Orange HRM: CVE-2012-5367 The vulnerability was discovered in the "/symfony/web/index.php" script...

FL Studio 10 Producer Edition - Buffer Overflow (SEH) (PoC)

FL Studio 10 Producer Edition - Buffer Overflow SEH PoC Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition...

FL Studio 10 Producer Edition Buffer Overflow

Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be Vulnerable. Tested On : Windows 7...

FL Studio 10 Producer Edition SEH Based Buffer Overflow PoC

Exploit for windows platform in category dos / poc Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other...

FL Studio 10 Producer Edition - Buffer Overflow (SEH) (PoC)

Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be Vulnerable. Tested On : Windows 7...

FastStone Image Viewer 4.6 - ReadAVonIP Crash (PoC)

FastStone Image Viewer 4.6 - ReadAVonIP Crash PoC !/usr/bin/perl FastStone Image Viewer 4.6 Vendor URI: http://www.faststone.org Vendor Description: An image browser, converter and editor that supports all major graphic formats including BMP, JPEG, JPEG 2000, GIF, PNG, PCX, TIFF, WMF, ICO, TGA an...

HCView - WriteAV Crash (PoC)

HCView - WriteAV Crash PoC !/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image...

Open-Realty 2.5.6 Local File Inclusion

Exploit Title: Open-Realty v2.5.6 Local File Inclusion Vulnerability Date: 06/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.open-realty.org/ Software Link: http://www.open-realty.org/release/open-realty2.5.6.zip Version:...

XnView JLS File Decompression Heap Overflow

XnView JLS File Decompression Heap Overflow Summary XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a...