Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

This module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX. When sending an invalid pointer to the extSetOwner function of UfPBCtrl.dll an attacker may be able to execute arbitrary code. Module Options msf use...

BS.Player 2.56 build 1043 - 'mfc71loc.dll' DLL Hijacking

/ Exploit Title: BS.Player DLL Hijacking Exploit mfc71loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.bsplayer.org Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID...

Bloodshed Dev-C++ 4.9.9.2 - Multiple EXE Loading Arbitrary Code Executions

// source: https://www.securityfocus.com/bid/42737/info Bloodshed Dev-C++ is prone to a vulnerability that lets attackers execute arbitrary code. This issue affects 'make.exe' and 'minw32-make.exe'. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application...

Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking

/ Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o rpawinet.dll PowerPoint-DLL.c .odp, .pothtm...

Roxio MyDVD 9 - 'HomeUtils9.dll' DLL Hijacking

/ Exploit Title: Roxio MyDVD 9 DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o HomeUtils9.dll MyDVD9-DLL.c .dmsd and .dmsm files are affected. / include define DllExport...

Microsoft Services - 'nwapi32.dll' (MS06-066) (Metasploit)

$Id: ms06066nwapi.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Abyssal Metal Player 2.0.9 Denial Of Service

Exploit Title: Abyssal Metal Player 2.0.9 DoS Date: 23/08/2010 Author: 41.w4r10r Version: 2.0.9 Tested on : Windows XP SP2 Eng Software Link: http://www.abyssalsoft.com/files/download.php?id=15 !/usr/bin/python Abyssal Metal Player is Media File Player which Plays many Media Files such as .Mp3 ,...

Microsoft Excel Featheader Buffer Overflow

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003/2007 Tested on XP SP2 ...

Abyssal Metal Player 2.0.9 Denial of Service

Exploit for windows platform in category dos / poc ============================================ Abyssal Metal Player 2.0.9 Denial of Service ============================================ Exploit Title: Abyssal Metal Player 2.0.9 DoS Date: 23/08/2010 Author: 41.w4r10r Version: 2.0.9 Tested on :...

ECShop v2.7.2 (FCKeditor Remote Upload File) Exploit

Exploit for asp platform in category web applications ==================================================== ECShop v2.7.2 FCKeditor Remote Upload File Exploit ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Microsoft Word Record Parsing Buffer Overflow

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 Greets Villy, Abhishek Lyall and ASL IT SECURITY TEAM Author Abhishek Sahni - abhi00703atgmaildotcom, infoataslitsecuritydotcom Web -...

Microsoft Excel - FEATHEADER Record (MS09-067)

Microsoft Excel - FEATHEADER Record MS09-067 MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwi...

Microsoft Excel - FEATHEADER Record (MS09-067)

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec cmd.exe + ExitProcess Shellcode - 1...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...

Joomla! Component com_extcalendar - Blind SQL Injection

Joomla! Component comextcalendar - Blind SQL Injection 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author :...

Joomla Component com_extcalendar Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================== Joomla Component comextcalendar Blind SQL Injection Vulnerability ================================================================== Date: 20/08/2010 0 Author : Lagripe-Dz 1...

PlayPad Music Player 1.12 - .mp3 Denial of Service

PlayPad Music Player 1.12 - .mp3 Denial of Service Exploit Title: PlayPad Music Player v1.12 .mp3 File Processing BoF/Crash Date: 20th August, 2010 Author: Praveen Darshanam Software Link:...

Joomla! Component com_extcalendar - Blind SQL Injection

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author : Lagripe-Dz 1 contact : [email protected] 8 Home :...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...

Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference (MS09-050)

Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference MS09-050 Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista...