CVE-2010-3140: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP fi...

CVE-2010-3138: Undefined Security Weakness

Untrusted search path vulnerability in the Indeo Codec in iac2532.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that...

Opera 10.61 DLL Hijacking Exploit

/ Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .xht .xhtm .xhtl dwmapi.dll is used i...

Avast! 5.0.594 License Files DLL Hijacking Exploit

Exploit Title: avast! license files DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.avast.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOI...

Ettercap NG 0.7.3 DLL Hijacking Exploit

/ Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: REMOVED BY REQUEST OF AUTHOR Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit http://chaossecurity.wordpress.com/ /...

Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Site : www.BeenuArora.com / Exploit Title: Microsoft Internet Connection Signup Wizard DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .isp Compile and rena...

Clansphere 2010 Cross Site Scripting / SQL Injection

Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : [email protected] Software Link: Download:http: http://sourceforge.net/projects/clansphere/ Version: all Tested on: WinXp sp3 Risk : HIGHT Description : clansphere offers some nice features for you to...

Adobe Dreamweaver CS5 DLL Hijacking Exploit

Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVO...

CorelDRAW X3 13.0.0.576 DLL Hijacking Exploit

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Windows Live Email DLL Hijacking Exploit

/ Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .nws .rss / include...

Firefox <= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]

/ Exploit Title: Firefox = 3.6.8 DLL Hijacking Exploit dwmapi.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Firefox v3.6.8 Tested on: Windows XP SP3 En Vulnerable extensions: .htm .html .jtx .mfp Greetz: Astalavista, OffSEC, Exploit-DB / include...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

Windows Program Group DLL Hijacking Exploit

/ Exploit Title: Windows Program Group DLL Hijacking Exploit imm.dll Date: 25/08/2010 Author: Alvaro Ovalle Email: aovalle at zoho dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .grp / include int run WinExec"calc", SWSHOW; exit0; return 0; BOOL WINAPI DllMainHINSTANCE...

Nullsoft Winamp 5.581 (wnaspi32.dll) DLL Hijacking Exploit

Summary Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features. Description Winam...

Firefox 3.6.8 DLL Hijacking Exploit

/ Exploit Title: Firefox define DllExport declspec dllexport DllExport void CPAcquireContext pwn; DllExport void DWMAPI100 pwn; DllExport void DWMAPI101 pwn; DllExport void DwmEnableComposition pwn; DllExport void DWMAPI103 pwn; DllExport void DWMAPI104 pwn; DllExport void DWMAPI105 pwn; DllExpor...

Adobe PDF Escape EXE Social Engineering (No JavaScript)

$Id: adobepdfembeddedexenojs.rb 10126 2010-08-24 18:20:16Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mircosoft Windows Program Group DLL Hijacking Exploit

Exploit for windows platform in category local exploits ===================================================== Mircosoft Windows Program Group DLL Hijacking Exploit ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Microsoft Group Convertor DLL Hijacking Exploit (imm.dll)

Exploit for windows platform in category local exploits ========================================================= Microsoft Group Convertor DLL Hijacking Exploit imm.dll ========================================================= / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly,...

ClanSphere 2010 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== ClanSphere 2010 Multiple Vulnerabilities ======================================== Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : email protected Software Lin...