Microsoft Excel - HFPicture Record Parsing Remote Code Execution

Microsoft Excel - HFPicture Record Parsing Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 16 binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability...

RogiShip Explorer [browser] 1.3 - Crash POC

Exploit for windows platform in category dos / poc =========================================== RogiShip Explorer browser 1.3 - Crash POC =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

AA SMTP Server 1.1 - Crash (PoC)

========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin Vamshi,Sid3^effects,r0073r...

Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH

Exploit for windows platform in category local exploits =========================================================== Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH =========================================================== Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U...

FreeBSD 8.1/7.3 vm.pmap Kernel Local Race Condition

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FreeBSD 8.1/7.3 vm.pmap kernel local race condition Author: Maksymilian Arciemowicz http://SecurityReason.com http://lu.cxib.net Date: - - Dis.: 09.07.2010 - - Pub.: 07.09.2010 Affected Software verified: - - FreeBSD...

Acoustica MP3 Audio Mixer 2.471 - Extended .M3U Directives (SEH)

Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 CVE : / / / | | / / / | ...

Textpattern 4.2.0 (txplib_db) Null Termination Cross-Site Scripting Vulnerability

Summary Textpattern is an open source content management system unlike any other; it allows you to easily create, edit and publish content and make it beautiful in a professional, standards-compliant manner. Description Textpattern CMS version 4.2.0 suffers from a XSS vulnerability. Input passed...

Joomla Aardvertiser 2.1 Blind SQL Injection

Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability Date: 07.09.2010 Author: Stephan Sattler // www.solidmedia.de Software Link: http://sourceforge.net/projects/aardvertiser/files/comaardvertiser%20V2.1.1%20Free/comaardvertiserfree.zip/download Version: 2.1 fre...

FreeBSD 8.17.3 - vm.pmap Local Race Condition

FreeBSD 8.17.3 - vm.pmap Local Race Condition -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FreeBSD 8.1/7.3 vm.pmap kernel local race condition Author: Maksymilian Arciemowicz http://SecurityReason.com http://lu.cxib.net Date: - - Dis.: 09.07.2010 - - Pub.: 07.09.2010 Affected Software verified: ...

ColdBookmarks 1.22 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== ColdBookmarks 1.22 SQL Injection Vulnerability ============================================== ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/...

ColdBookmarks 1.22 - SQL Injection

ColdBookmarks 1.22 - SQL Injection ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdOfficeView 2.04 Multiple Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications ================================================================ ColdOfficeView 2.04 Multiple Blind SQL Injection Vulnerabilities ================================================================ ColdGen - coldofficeview v2.04 Remote Blind SQL...

Internet Download Accelerator 5.8 - Remote Buffer Overflow (PoC)

Internet Download Accelerator 5.8 - Remote Buffer Overflow PoC arg1=String9696969, "A" + String999999, unescape"%960" idaiehlp.NotSafe arg1...

1024 CMS 2.1.1 - Blind SQL Injection

1024 CMS 2.1.1 - Blind SQL Injection Exploit Title: 1024cms 2.1.1 Blind SQL Injection Vulnerability Date: 07.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://1024cms.org Software Link: http://d10xg45o6p6dbl.cloudfront.net/projects/f/freecms1024/1024v2.zip or...

Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC

Exploit for python platform in category dos / poc ==================================================== Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC ==================================================== Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC vulnerble application link...

Virtual DJ Trial 6.1.2 - Buffer Overflow Crash (SEH) (PoC)

Virtual DJ Trial 6.1.2 - Buffer Overflow Crash SEH PoC Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC vulnerble application link http://www.virtualdj.com/download/trial.html tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog -...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

Intel Video Codecs 5.0 - Remote Denial of Service

Intel Video Codecs 5 Remote Denial of Service Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: August 27, 2010 Filename: ir5032.dll Version: 5.2562.15.55 Description: A remote user can cause denial of service conditions on remote hosts by embeddi...

Intel Video Codecs 5.0 - Remote Denial of Service

Intel Video Codecs 5.0 - Remote Denial of Service Intel Video Codecs 5 Remote Denial of Service Author: Matthew Bergin Website: http://berginpentesting.com/ Email: [email protected] Date: August 27, 2010 Filename: ir5032.dll Version: 5.2562.15.55 Description: A remote user can cause denia...

XSS vulnerability in ArtGK CMS

Vulnerability ID: HTB22588 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms1.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: XSS Cross Site...