Apple Safari 4.0.4 (531.21.10) - Stack Overflow Denial of Service

Apple Safari 4.0.4 531.21.10 - Stack Overflow Denial of Service !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits wi...

Safari 4.0.4 Stack Overflow Denial Of Service

!/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits with illegal operation: AppName: safari.exe AppVer: 5.31.21.10...

Majoda CMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Majoda CMS Auth Bypass SQL Injection Vulnerability ==================================================== Exploit Title: Majoda CMS Auth Bypass SQL Injection Vulnerability Date: 2010-02-28...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer ORB File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in David Manthey's Orbital Viewer. When processing .ORB files, data is read from file into a fixed-size stack buffer using the fscanf function. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by...

Orbital Viewer 1.04 - .orb File Local Universal Overflow (SEH)

Orbital Viewer 1.04 - .orb File Local Universal Overflow SEH !/usr/bin/python Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC

Exploit for unknown platform in category dos / poc ================================================ Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC ================================================ Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC Stack overflow on Safari Extra long malforme...

Easy FTP Server 1.7.0.2 Buffer Overflow

Exploit Title: Easy FTP Server 1.7.0.2 Remote BoF Date: 20/02/2010 Author: athleet Software Link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip Version: 1.7.0.2 Tested on: XP SP3 Eng CVE : None Code : Below !/usr/bin/python import socket...

Ollydbg 2.00 Beta 1 Local Buffer Overflow

Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print "" print "" print " SuBz3r0 " print "" pri...

Article Friendly SQL Injection Vulnerability

No description provided by source. / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow Tested on: XP SP3 Eng !/usr/bin/python import socket, sys print """ Easy FTP Server 1.7.0.2 Remote BoF Discovered by: athleet jonbutler88atgooglemaildotcom """ if lensys.argv != 3: print "Usage: ./easyftp.py " sys.exit1 target = sys.argv1 port =...

Microsoft Windows Media Player 11.0.5721.5145 - .mpg Buffer Overflow

Microsoft Windows Media Player 11.0.5721.5145 - .mpg Buffer Overflow !/usr/bin/perl Windows Media Player 11.0.5721.5145 .mpg Buffer Overflow Exploit Homepage: www.microsoft.com Exploit Coded by: cr4wl3r From: Indonesia Testing Results: Bug: Integer Division By Zero Platform: Windows XP SP3 ENG...

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion (PoC)

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion PoC !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow

Tested on: XP SP3 Eng !/usr/bin/python import socket, sys print """ Easy FTP Server 1.7.0.2 Remote BoF Discovered by: athleet jonbutler88atgooglemaildotcom """ if lensys.argv != 3: print "Usage: ./easyftp.py " sys.exit1 target = sys.argv1 port = intsys.argv2 Calc.exe PoC shellcode - Tested on XP...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

No description provided by source. Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID:...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E Member: Scan File:...

Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit

No description provided by source. Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print "" prin...

Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution

$Id: dxstudioplayerexec.rb 8541 2010-02-17 20:14:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...