Trend Micro Internet Security Pro 2010 Active-X

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

DIZzy 1.12 - Local Stack Overflow

!/usr/bin/ruby Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x Version: 1.12 Tested on: Windows XP SP3 Eng/Spa CVE: n/a Notes: Bug was originally found on 22/02/2010 but since there is no response from developers it goes public. win32/xp sp2 cmd.ex...

Realtek Audio Control Panel 1.0.1.65 Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite ... so it's ...

Realtek Audio Control Panel 1.0.1.65 Exploit

Exploit for windows platform in category local exploits ============================================ Realtek Audio Control Panel 1.0.1.65 Exploit ============================================ done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classi...

Realtek Audio Microphone Calibration 1.1.1.6 Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite ... so it's a...

Realtek Audio Microphone Calibration 1.1.1.6 Exploit

Exploit for windows platform in category local exploits ==================================================== Realtek Audio Microphone Calibration 1.1.1.6 Exploit ==================================================== done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home...

Realtek HD Audio Control Panel 2.1.3.2 Exploit

Exploit for windows platform in category local exploits ============================================== Realtek HD Audio Control Panel 2.1.3.2 Exploit ============================================== done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH...

Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow

Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing too long argument as a startup parameter. Shellcode can by...

Realtek Audio Control Panel 1.0.1.65 - Local Buffer Overflow

Realtek Audio Control Panel 1.0.1.65 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run vi...

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter...

Realtek Audio Control Panel 1.0.1.65 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite ... so it's ...

Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite ... so it's a...

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwri...

Mp3-Nator 2.0 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =========================================== Mp3-Nator 2.0 Buffer Overflow Exploit SEH =========================================== !usr/bin/python Exploit Title: Exploit Buffer Overflow MP3-Nator Date: 10\11\2010 Author: C4SS!0 G0M3S Software...

Free CD To MP3 Converter 3.1 Buffer Overflow

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

MP3-Nator 2.0 - Local Buffer Overflow (SEH)

MP3-Nator 2.0 - Local Buffer Overflow SEH !usr/bin/python Exploit Title: Exploit Buffer Overflow MP3-Nator Date: 10\11\2010 Author: C4SS!0 G0M3S Software Link: http://www.brothersoft.com/d.php?softid=16524&url=http%3A%2F%2Ffiles.brothersoft.com%2Fmp3audio%2Fplayers%2Fmp3nator.zip Version: 2.0...

Free CD to MP3 Converter v3.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =========================================================== Free CD to MP3 Converter v3.1 Buffer Overflow Exploit SEH =========================================================== Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow...

IBM OmniFind Buffer Overflow Vulnerability

Exploit for multiple platform in category dos / poc ========================================== IBM OmniFind Buffer Overflow Vulnerability ========================================== Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a...

IBM OmniFind - Buffer Overflow

IBM OmniFind - Buffer Overflow Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a passwordfield. Entering a valid username default value is »esadmin« and a very long string into the password field a buffer overflow is triggered. The function...

Microsoft Office PowerPoint Legacy Files (CVE-2010-2572)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is due ...