VideoLAN VLC Client (Windows x86) - 'smb://' URI Buffer Overflow (Metasploit)

$Id: vlcsmburi.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Unreal Tournament 2004 (Windows) - 'secure' Remote Overflow (Metasploit)

$Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

win32/xp sp3 (Tr) Add Admin Account Shellcode 127 bytes

Exploit for win32 platform in category shellcode ======================================================= win32/xp sp3 Tr Add Admin Account Shellcode 127 bytes ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

win32/xp sp3 (Tr) calc.exe Shellcode 53 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Tr calc.exe Shellcode 53 bytes ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

win32/xp sp3 (Tr) cmd.exe Shellcode 52 bytes

Exploit for win32 platform in category shellcode ============================================ win32/xp sp3 Tr cmd.exe Shellcode 52 bytes ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

win32/xp sp3 (Tr) Create New File (zrl.txt) 74 bytes

Exploit for win32 platform in category shellcode...

CVE-2010-1891

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...

CVE-2010-1891

CVE-2010-1891 affects the Windows Client/Server Runtime Subsystem (CSRSS) in the Win32 subsystem on Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability stems from improper memory allocation for transactions when Chinese, Japanese, or Korean locales are enabled, allowing local users ...

HP Data Protector Media Operations 6.11 (Multiple Modules) - Null Pointer Dereference Denial of Service

Exploit Title: HP Data Protector Media Operations 6.11 Multiple NULL Pointer Dereference Local DoS 0day Date: 11/09/2010 Author: d0lc3 d0lc3xatgmaildomcom Author Link: http://elotrolad0.blogspot.com/ Software Link: trial https://h10078.www1.hp.com/cda/hpdc/navigation.do?...

LEADTOOLS 16.5 Active-X Common Dialogs Vulnerabilities

LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit device...

LeadTools ActiveX common dialogs 16.5 - Multiple Vulnerabilities

LeadTools ActiveX common dialogs 16.5 - Multiple Vulnerabilities LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital...

Notepad++ version 5.7 Insecure DLL Hijacking Vulnerability

OVERVIEW The Notepad++ application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT DESCRIPTION Based on the powerful editing...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)

$Id: apachemodjkoverflow.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apache (Windows x86) - Chunked Encoding (Metasploit)

$Id: apachechunked.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: "UFO: Alien Invasion 2.2.1 x86 Apr 28 2008 Win32...

win32 WinExec cmd.exe + ExitProcess Shellcode - 195 bytes

Exploit for win32 platform in category shellcode ========================================================= win32 WinExec cmd.exe + ExitProcess Shellcode - 195 bytes ========================================================= / Title: Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes Date:...

win32 MessageBoxA Shellcode

Exploit for win32 platform in category shellcode =========================== win32 MessageBoxA Shellcode =========================== / Title: Allwin MessageBoxA Shellcode Date: 2010-06-11 Author: RubberDuck Web: http://bflow.security-portal.cz Tested on: Win 2k, Win 2003, Win XP Home SP2/SP3 CZ/E...

SureThing CD Labeler Stack Overflow

/ surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Writeup: Unicode...

SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit

Exploit for windows platform in category local exploits =================================================================== SureThing CD Labeler m3u/pls - Unicode Stack Overflow PoC Exploit =================================================================== / surethingcdlabelerbofpoc.c SureThing ...