StarUML WinGraphviz.dll - ActiveX Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 Abou...

StarUML - WinGraphviz.dll ActiveX Buffer Overflow

StarUML - WinGraphviz.dll ActiveX Buffer Overflow Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 About...

StarUML - 'WinGraphviz.dll' ActiveX Buffer Overflow

Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 About StarUML -------------- StarUML is an open source...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

TEC-IT TBarCode - OCX ActiveX Control TBarCode4.ocx 4.1.0 Crash PoC Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link:...

TEC-IT TBarCode OCX ActiveX Control Buffer Overflow

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 BOF poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

Novell Client 2 SP3 - nicm.sys 3.1.11.0 Local Privilege Escalation

Novell Client 2 SP3 - nicm.sys 3.1.11.0 Local Privilege Escalation Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not su...

HP LoadRunner magentproc.exe Overflow

This module exploits a stack buffer overflow in HP LoadRunner before 11.52. The vulnerability exists on the LoadRunner Agent Process magentproc.exe. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use...

Cogent DataHub HTTP Server Buffer Overflow

This module exploits a stack based buffer overflow on Cogent DataHub 7.3.0. The vulnerability exists in the HTTP server. While handling HTTP headers, a strncpy function is used in a dangerous way. This module has been tested successfully on Cogent DataHub 7.3.0 Demo on Windows XP SP3. Module...

Chasys Draw IES Buffer Overflow

This module exploits a buffer overflow vulnerability found in Chasys Draw IES version 4.10.01. The vulnerability exists in the module fltBMP.dll, while parsing BMP files, where the ReadFile function is used to store user provided data on the stack in an insecure way. It results in arbitrary code...

Super Player 3500 - .m3u Local Stack Buffer Overflow

Super Player 3500 - .m3u Local Stack Buffer Overflow !/usr/bin/perl SuperPlayer3500 Local stack based buffer overflow Author:jun Email:[email protected] Date:Tue Jul 22 2013 Vendor Link:http://www.haojie.cn Software Link:http://www.haojie.cn/download/setup3500.exe App Version:3500 Tested...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit4 "Apple Quicktime 7 Invalid Atom Length Buffer Overflow", 'Description' = %q This module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle th...

VbsEdit 5.9.3 Buffer Overflow

Exploit Title: VbsEdit 5.9.3.smi file handling Buffer overflow vulnerability Date: 22.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.vbsedit.com/ Software Link: http://www.vbsedit.com/ Tested on: Windows XP SP3 Twitter: @schaba !/usr/bin/python Tested on: win XPsp3 chars = "A"90000 crush...

PCMan FTP Server 2.0.7 Buffer Overflow

Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

PCMan FTP Server 2.0.7 - Remote Exploit (msf)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'PCMan's FTPD V2.0.7 Username Overflow', 'Description' = %q This module exploits a buffer overflow found in the USER command of PCMan's FTPD. , 'Author' = 'MSJ ', 'License' = MSFLICENSE, 'DefaultOptions'...

PCMan FTP Server 2.0.7 - Remote (Metasploit)

PCMan FTP Server 2.0.7 - Remote Metasploit Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and term...

PCMan FTP Server 2.0.7 - Remote (Metasploit)

Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit

Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In fslx.sys 's hook function of "NtQueryValueKey" , it directly write to the buffer ...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow Vulnerability

This Metasploit module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and...

HP Managed Printing Administration jobAcct Remote Command Execution

This Metasploit module exploits an arbitrary file upload vulnerability on HP Managed Printing Administration 2.6.3 and before. The vulnerability exists in the UploadFiles function from the MPAUploader.Uploader.1 control, loaded and used by the server. The function can be abused via directory...