foobar2000 1.3.8 - .m3u Local Crash (PoC)

foobar2000 1.3.8 - .m3u Local Crash PoC Exploit Title: foobar2000 1.3.8 .m3u Local Crash PoC Date: 12-06-2015 Exploit Author: 0neb1n Vendor Homepage: http://www.foobar2000.org/ Software Link: http://www.foobar2000.org/getfile/e246984718ab7ab58fa1e0b072ff05a4/foobar2000v1.3.8.exe Version: 1.3.8...

SUSE SLED11 / SLES11 Security Update : FUSE (SUSE-SU-2015:1024-1)

This update for FUSE fixes the following security issue : CVE-2015-3202: FUSE did not clear the environment upon execution of external programs. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

CVE-2015-1759 is a memory-corruption remote code execution vulnerability in Microsoft Office, specifically in the Office Compatibility Pack SP3, caused by improper handling of in-memory objects during parsing of crafted Office files. The flaw can allow an attacker to execute arbitrary code on a v...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1760: Undefined Security Weakness

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

PT-2015-1370

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack affected versions not specified Microsoft Office Compatibility Pack SP3 Description The issue is related to improper data handling, which can be exploited by a remote attacker to execute arbitrary code using...

1 Click Extract Audio 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the...

1 Click Audio Converter 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the...

1 Click Extract Audio 2.3.6 Buffer Overflow

1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used b...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

Jildi FTP Client 1.5.6 (SEH) Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Author: Zahid Adeel Title: Jildi FTP Client 1.5.6 SEH BOF Version: 1.5.6 Build 1536 Software Link: http://usfiles.brothersoft.com/internet/ftp/jildiftp.zip Tested on: WinXP Professional SP3 Open jildi-poc.txt file and copy i...

SUSE SLED11 / SLES11 Security Update : Xen (SUSE-SU-2013:1774-1)

XEN has been updated to version 4.2.3 c/s 26170, fixing various bugs and security issues. - CVE-2013-4416: XSA-72: Fixed ocaml xenstored that mishandled oversized message replies - CVE-2013-4355: XSA-63: Fixed information leaks through I/O instruction emulation - CVE-2013-4361: XSA-66: Fixed...

iFTP 2.21 Buffer Overflow

!/usr/bin/python Exploit Title:iFTP 2.21 Buffer OverFlow Crash PoC Author: dogo h@ck Date Discovered : 12-5-2015 Vendor Homepage: http://www.memecode.com/iftp.php Software Link: http://www.memecode.com/data/iftp-win32-v2.21.exe Version: 2.21 Tested on : Windows XP Sp3 Crash : Go to Connect Host...

CVE-2015-1683

Microsoft Office 2007 SP3 is affected by CVE-2015-1683 (Memory Corruption Vulnerability) via crafted documents, enabling remote code execution with the caller’s privileges. The root cause is memory corruption while handling Office documents; affected component details are tied to parsing of docum...

CVE-2015-1683: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1700: Improper Input Validation

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."...

PT-2015-1169

Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 SP3 Microsoft Office versions prior to the fixed version Description The issue exists due to incorrect handling of objects in memory. Exploitation occurs when a user opens a specially crafted file. A remote attacker could...