Microsoft Movie Maker - Remote Code Execution (MS10-016)

Microsoft Movie Maker - Remote Code Execution MS10-016 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 4 | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/movie-maker-remote-code-execution-ms10-016/...

Movie Maker Remote Code Execution (MS10-016)

Exploit for windows platform in category remote exploits ============================================ Movie Maker Remote Code Execution MS10-016 ============================================ Title : Movie Maker Remote Code Execution MS10-016 Version : moviemk.exe 2.1 XP SP3 Analysis :...

Trend Micro Internet Security Pro 2010 - ActiveX extSetOwner() Remote Code Execution (2)

Trend Micro Internet Security Pro 2010 - ActiveX extSetOwner Remote Code Execution 2 shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (2)

shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

TFTPDWIN 0.4.2 - Directory Traversal

TFTPDWIN 0.4.2 - Directory Traversal +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

TFTP Desktop 2.5 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ================================================== TFTP Desktop 2.5 Directory Traversal Vulnerability ================================================== Author: chr1x email protected Date: August 30, 2010 Affected operating system/software,...

Autodesk MapGuide Viewer - ActiveX Denial of Service

Autodesk MapGuide Viewer - ActiveX Denial of Service Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL...

tftp desktop 2.5 - Directory Traversal

tftp desktop 2.5 - Directory Traversal +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Autodesk MapGuide Viewer ActiveX Denial of Service

Exploit for windows platform in category dos / poc ================================================== Autodesk MapGuide Viewer ActiveX Denial of Service ================================================== Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date:...

Autodesk MapGuide Viewer Overflow

Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Code: ACCESSVIOLATION Disasm: 175CE9E...

Autodesk MapGuide Viewer - ActiveX Denial of Service

Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Code: ACCESSVIOLATION Disasm: 175CE9E...

Seagull 0.6.7 SQL Injection

1 1 0 Sweet the Algerian Haxxor 0 1 0 0 1 1 +Exploit Title: seagull-0.6.7 SQLinjection Vulnerabilitie 0 0 +Date: 29/08/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://seagullproject.org/ 0 0 +Download: 1 1 +Version: 0.6.7 and lesser 0 0 +Tested on: WinXp sp3 ...

Microsoft Internet explorer 8 DLL Hijacking (IESHIMS.DLL)

Exploit for windows platform in category local exploits ========================================================= Microsoft Internet explorer 8 DLL Hijacking IESHIMS.DLL ========================================================= Author: MantyCore Tested on: XP SP3 include define DLLIMPORT declspec...

CVE-2010-3138

Untrusted search path vulnerability in the Indeo Codec in iac2532.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

CVE-2010-3140

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

CVE-2010-3138

The CVE-2010-3138 issue affects Microsoft Windows XP SP3 with the Indeo Codec (iac25_32.ax) loading an insecure library (iacenc.dll) from the current working directory, enabling local privilege escalation via crafted .avi/.mka/.ra/.ram files (e.g., through players like BS.Player or Media Player C...

CVE-2010-3144: Undefined Security Weakness

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

iGamingCMS1.5 multiple vulnirabilities

Exploit for php platform in category web applications ====================================== iGamingCMS1.5 multiple vulnirabilities ====================================== Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : email protected Software Link:...

CVE-2010-3148: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading...