7287 matches found
KLA10284 Multiple vulnerabilities in Oracle VirtualBox
Unspecified vulnerabilities were found in Oracle VirtualBox. By exploiting this vulnerability malicious users can affect integrity, availability and confidentiality. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Exploitation Public exploits exist for this...
Oracle VM VirtualBox < 3.2.24 / 4.0.26 / 4.1.34 / 4.2.26 / 4.3.14 Multiple Unspecified Vulnerabilities
The remote host contains a version of Oracle VM VirtualBox that is prior to 3.2.24, 4.0.26, 4.1.34, 4.2.26 or 4.3.14. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw relating to the Core subcomponent that may allow a local attacker to gain elevated privileges...
Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation
Vulnerability Details Affected Vendor: Oracle Affected Product: VirtualBox Guest Additions Affected Versions: 4.3.8 - 4.3.10 Platform: Microsoft XP SP3 CWE Classification: CWE-123: Write-what-where Condition Impact: Arbitrary code execution Attack vector: IOCTL CVE ID: CVE-2014-2477 2...
Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation
Title: Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-001 Publication Date: 07.15.2014 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt 1. Vulnerability Details Affected Vendor: Oracle Affected Product: VirtualBox...
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation
A vulnerability within the VBoxGuest driver allows an attacker to inject memory they control into an arbitrary location they define. This can be used by an attacker to overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently calling NtQueryIntervalProfile on Windows XP SP3 system...
Nokia Multimedia Player 1.0 SEH Unicode Exploit
No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...
KingView 6.5.3 SCADA ActiveX Exploit
No description provided by source. Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on...
Xion Player 1.0.125 Stack Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...
Music Animation Machine MIDI Player SEH BOF
No description provided by source. Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows XP SP2 SE Virtualbox...
M.J.M. Quick Player 1.2 - Stack BOF
No description provided by source. Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows Product : M.J.M...
Sun VirtualBox <= 3.0.6 - Privilege Escalation
No description provided by source. !/bin/sh CVE-2009-3692 Sun VirtualBox = 3.0.6 local root exploit ======================================================== Exploits popen meta char shell injection vulnerability in Sun VirtualBox. E.g. admin@sundevil:/test$ id uid=101admin gid=10staff...
ZipScan 2.2c SEH
No description provided by source. !/usr/bin/perl Software : ZipScan 2.2c .zip Bug found by : Lincoln Author : Lincoln & corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...
Google Chrome 8.0.552.237 - .replace DoS
No description provided by source. html head Exploit Title: Google Chrome v8.0.552.237 .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.google.com/chrome Version: v8.0.552.237 Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3....
ABBS Audio Media Player Buffer Overflow Exploit (M3U/LST)
No description provided by source. Exploit: ABBS Audio Media Player Buffer Overflow Exploit M3U/LST Date: 14.03.11 Author: Rh0 Rh0atz1p.biz Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: WinXP Pro SP3 EN VirtualBox print Stack buffer overflow in ABBS Audio Medi...
CoreFTP 2.1 b1637 - (password field) Universal BOF Exploit
No description provided by source. !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP SP3 En VirtualBox Greetz to...
SopCast 3.2.9 - Remote Exploit (0day)
No description provided by source. html Center H1Sopcast POC by Sud0br/H1 bTested on XP SP3 EN on VBox with IE 7br Spraying a lot to get a nice unicode usable address 0x20260078br I sprayed with a set of P/P/R instructions to come back to the stackbr Need internet connection on the box to trigger...
Audiotran 1.4.2.4 SEH Overflow Exploit (DEP Bypass)
No description provided by source. Exploit Title: Audiotran 1.4.2.4 SEH Overflow Exploit DEP Bypass Date: 09/20/10 Credit/Bug found by : Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Author: Muhamad Fadzil Ramli - mind1355 at gmail dot com Software Link:...
Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit
No description provided by source. Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit Date : 16/05/2010 Author : Sud0 Bug found by : chap0 Software Link : http://download.cnet.com/Audio-Converter/3000-21404-10045287.html Version : 8.1 OS : Windows Tested on : XP SP3 En...
Concrete5 5.6.2.1 (index.php, cID param) - SQL Injection
No description provided by source. Exploit Title: Concrete5 sql injection Date: 18/02/2014 Exploit Author: [email protected] Vendor Homepage: https://www.concrete5.org/ Software Link: http://www.concrete5.org/downloadfile/-/view/58379/8497/ Version: 5.6.2.1 stable Tested on: Virtualbox debian UR...
Acoustica Audio Converter Pro 1.1 (build 25) Heap Overflow(.mp3.wav.ogg.wma) PoC
No description provided by source. Exploit Title: Acoustica Audio Converter Pro 1.1 build 25 Heap Overflow.mp3.wav.ogg.wma PoC Date: September 21 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/audio-converter/download.htm Version: 1.1 build 25 Tested on: Windows xp sp3 runni...