Yokogawa CS3000 BKESimmgr.exe Buffer Overflow

This module exploits an stack based buffer overflow on Yokogawa CS3000. The vulnerability exists in the BKESimmgr.exe service when handling specially crafted packets, due to an insecure usage of memcpy, using attacker controlled data as the size count. This module has been tested successfully in...

Apple QuickTime远程缓冲区溢出漏洞

BUGTRAQ ID: 65787 CVECAN ID: CVE-2014-1251 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows 7, Vista, XP SP2平台上QuickTime 7.7.5之前版本处理'clef'元素时存在缓冲区溢出问题，恶意制作的视频文件可导致应用意外终止或执行任意代码。 0 Apple Quicktime 7.7.5 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apple QuickTime远程内存破坏漏洞

BUGTRAQ ID: 65784 CVECAN ID: CVE-2014-1243 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows 7, Vista, XP SP2平台上QuickTime 7.7.5之前版本处理跟踪列表时存在未初始化指针问题，恶意制作的视频文件可导致应用意外终止或执行任意代码。 0 Apple Quicktime 7.7.5 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[EtherApe] A graphical network monitor

EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN...

HP Data Protector Backup Client Service Directory Traversal

This Metasploit module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists at the Backup Client Service OmniInet.exe when parsing packets with opcode 42. This Metasploit module has been tested successfully on HP Data Protector 6.20 ...

vTiger CRM 5.4.0 SOAP - AddEmailAttachment Arbitrary File Upload (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload', 'Description' = %q vTiger CRM allows an user to...

Ofilter Player WAV文件处理除零错误拒绝服务漏洞

Ofilter Player是一款简单易用的多媒体播放器。 Ofilter Player不正确处理畸形WAV文件，允许攻击者构建恶意文件，诱使应用程序解析，触发除零错误，可使应用程序崩溃。 0 Ofilter Player 1.1 目前没有详细解决方案提供： http://www.008soft.com/ ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Softwa...

HP Data Protector Backup Client Service Remote Code Execution

This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2...

HP Data Protector Backup Client Service Directory Traversal

This module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists in the Backup Client Service OmniInet.exe and is triggered when parsing packets with opcode 42. This module has been tested successfully on HP Data Protector 6.20 on...

HP Client Automation Command Injection

This module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon radexecd.exe, which doesn't authenticate execution requests by default. This module has been tested...

Easy Karaokay Player '.wav'文件除零错误拒绝服务漏洞

No description provided by source. !/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe...

Ofilter Player 1.1 - '.wav' Integer Division by Zero

?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda Malith Twitter: @OsandaMalith /!...

HP SiteScope issueSiebelCmd - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStagerVBS def...

HP SiteScope issueSiebelCmd Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStagerVBS def...

Easy Karaoke Player 3.3.31 Integer Division By Zero

!/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadskaraoke.exe E-Mail: [email protected]...

Microsoft Windows ndproxy.sys Local Privilege Escalation

Exploit for windows platform in category local exploits require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited...

Microsoft Windows ndproxy.sys Local Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

Microsoft Windows - 'ndproxy.sys' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This Metasploit module exploits a directory traversal vulnerability on the version 11.52 of HP LoadRunner. The vulnerability exists on the EmulationAdmin web service, specifically in the copyFileToServer method, allowing to upload arbitrary files. This Metasploit module has been tested successful...

HP LoadRunner EmulationAdmin Web Service Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 /Apache-Coyote/1.1/ include REXML include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper...