Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

/ Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows Server 2003 SP2 Itanium-based Systems Windo...

Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Softwa...

Zortam MP3 Media Studio 21.15 Privilege Escalation

Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Software Link: http://www.zortam.com/download.html...

Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Software Link: http://www.zortam.com/download.html...

AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege Date: 22/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://anydesk.com Software Link:...

PHP 5.0.0 - tidy_parse_file() Local Buffer Overflow

PHP 5.0.0 - tidyparsefile Local Buffer Overflow...

PHP 5.0.0 - 'tidy_parse_file()' Local Buffer Overflow

...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link: https://eu.battle.net/account/download/ Version: Version 1.5.0.7963 Tested...

Icecream Apps - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream...

Win32k Forms Creation Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. There is a denial-of-service vulnerability in Win32k form creation, which occurs when a parameter in a system service function in Win32k.sys fails to be correctly checked, causing the local kernel to deny service when the user runs...

win32k.sys SfnOUTSTRING Local Kernel Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. A local kernel denial of service vulnerability exists in the win32k.sys SfnOUTSTRING function. An attacker can exploit the vulnerability to launch a denial of service attack, resulting in a blue screen and reboot of the system. In...

Philips Xper-IM Connect Vulnerabilities

OVERVIEW Independent researchers Mike Ahmadi of Synopsys and Billy Rios of Whitescope LLC, in collaboration with Philips, have identified numerous vulnerabilities with an automated software composition analysis tool in the Philips Xper-IM Connect system running on Windows XP. Philips reports that...

Microsoft Windows Authenticated User Code Execution

This module uses a valid administrator username and password or password hash to execute an arbitrary payload. This module is similar to the "psexec" utility provided by SysInternals. This module is now able to clean up after itself. The service created by this tool uses a randomly chosen name an...

Core FTP Le 2.2 Buffer Overflow

!/usr/bin/env python ''' Exploit Title: Core FTP Le v2.2 - Proxy Password Buffer Overflow Date: 2016-7-11 Author: s0nk3y Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows XP CVE: N/A Type: Buffer Overflow + Proof of concept Click options Global Settings - Proxy ...

Mediacoder 0.8.43.5830 - '.m3u' Buffer Overflow SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

Mediacoder 0.8.43.5830 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

Mediacoder 0.8.43.5830 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.8.43.5830 - .m3u Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

Windows XP - 10 - Download & Execute Shellcode

Windows XP - 10 - Download & Execute Shellcode. Shellcode exploit for windows platform / + Author : B3mB4m Contact : [email protected] Project : https://github.com/b3mb4m/shellsploit-framework Greetz : Bomberman,T-Rex,Pixi ----------------------------------------------------------- Tested on ...

Adobe Flash Player DLL Hijacking

Hi @ll, the executable uninstallers for Flash Player before version 22.0.0.192 and 18.0.0.360 both released on 2016-06-15 are vulnerable to DLL hijacking: they load and execute multiple Windows system DLLs from their "application directory" instead of Windows' "system directory"...