MS12-027 MSCOMCTL ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Quest InTrust Annotation Objects Uninitialized Pointer

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

IBM Tivoli Provisioning Manager Express Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :uaname =...

MS12-027 MSCOMCTL ActiveX Buffer Overflow

This module exploits a stack buffer overflow in MSCOMCTL.OCX. It uses a malicious RTF to embed the specially crafted MSComctlLib.ListViewCtrl.2 Control as exploited in the wild on April 2012. This module targets Office 2007 and Office 2010 targets. The DEP/ASLR bypass on Office 2010 is done with...

BlazeVideo HDTV Player 6.6 Professional - Local Overflow (SEH + ASLR + DEP Bypass)

BlazeVideo HDTV Player 6.6 Professional - Local Overflow SEH + ASLR + DEP Bypass !/usr/bin/python -w ----------------------------------------------------------------------------------- Exploit: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR Author: b33f - http://www.fuzzysecurity.com/ OS:...

Sysax 5.53 SSH Username Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Sysax 5.53 SSH...

Sysax 5.53 SSH Username Buffer Overflow

This module exploits a vulnerability found in Sysax's SSH service. By supplying a long username, the SSH server will copy that data on the stack without proper bounds checking, therefore allowing remote code execution under the context of the user. Please note that previous versions before 5.53 a...

Trend Micro Control Manger 5.5 - 'CmdProcessor.exe' Remote Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "TrendMicro Contro...

Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow

This module exploits a remote buffer overflow in the ZENworks Configuration Management. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted packet with the opcode 0x6c PROXYCMDGETNEXTSTEP to port 998/TCP. The module has been successfully tested on...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

This module exploits a heap overflow vulnerability in the Windows Multimedia Library winmm.dll. The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using the Windows Media Player ActiveX control. Exploitation is done by supplying a speciall...

Wireshark 1.4.4 DECT Dissector Buffer Overflow

!/usr/bin/env python -- coding: iso-8859-15 -- a = """ \n\t-- CVE: 2011-1591 : Wireshark = 2.5 For any comments, remarks, news, please mail me : ipv at team . net \n""" import sys, struct if sys.versioninfo = 2, 5: from scapy.all import else: from scapy import align def xv: return struct.pack"I",...

Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow

!/usr/bin/env python -- coding: iso-8859-15 -- a = """ \n\t-- CVE: 2011-1591 : Wireshark = 2.5 For any comments, remarks, news, please mail me : ipv at team . net \n""" import sys, struct if sys.versioninfo = 2, 5: from scapy.all import else: from scapy import align def xv: return struct.pack"I",...

Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow

Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow !/usr/bin/env python -- coding: iso-8859-15 -- a = """ \n\t-- CVE: 2011-1591 : Wireshark = 2.5 For any comments, remarks, news, please mail me : ipv at team . net \n""" import sys, struct if sys.versioninfo = 2, 5: from scapy.all import else...

QQPLAYER PICT PnSize Buffer Overflow WIN7 DEP_ASLR BYPASS

No description provided by source. Exploit Title: QQPLAYER PICT PnSize Buffer Overflow WIN7 DEPASLR BYPASS Date: 2011,11,21 Author: hellok Software Link: http://dldir.qq.com/invc/qqplayer/QQPlayerSetup32845.exe Version: 32845lastest Tested on: WIN7 require 'msf/core' class Metasploit3...

QQPLAYER PICT PnSize Buffer Overflow WIN7 DEP_ASLR BYPASS

Exploit for windows platform in category local exploits Exploit Title: QQPLAYER PICT PnSize Buffer Overflow WIN7 DEPASLR BYPASS Date: 2011,11,21 Author: hellok Software Link: http://dldir.qq.com/invc/qqplayer/QQPlayerSetup32845.exe Version: 32845lastest Tested on: WIN7 require 'msf/core' class...

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

This module exploits a stack based buffer overflow in the Active control file ImageViewer2.OCX by passing an overly long argument to an insecure TifMergeMultiFiles method. Exploitation results in code execution with the privileges of the user who browsed to the exploit page. The victim will first...

BlazeVideo HDTV Player 6.6 Professional - Universal ASLR + DEP Bypass

BlazeVideo HDTV Player 6.6 Professional - Universal ASLR + DEP Bypass Exploit Title: BlazeVideo HDTV Player 6.6 Professional Universal DEP+ASLR Bypass Author: modpr0be Software Download: http://www.blazevideo.com/download.php?product=blazevideo-hdtv-pro Date: 07/10/2011 Tested on: Windows XP SP3,...

Muse Music All-In-One PLS Buffer Overflow

!/usr/bin/perl +Exploit Title: Muse Music All-In-One PLS File Buffer Overflow ExploitDEP Bypass +Date: 25\09\2011DD\MM\YYYY +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/Muse-Music-All-In-One/3000-21414-10070288.html +Version: 1.5.0.001 +Tested On: WIN-XP SP3 Brazilian Portuguese...

Freefloat FTP Server - Remote Buffer Overflow (DEP Bypass)

Freefloat FTP Server - Remote Buffer Overflow DEP Bypass !/usr/bin/python import socket, sys from struct import pack print "\n===============================" print "Freefloat FTP Server DEP Bypass" print " Written by Blake " print "===============================\n" if lensys.argv != 3: print "...