VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation Exploit

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core. A vulnerability within the VBoxGuest driver allows an...

VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 'VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation',...

Kolibri WebServer HTTP GET Request Handling Buffer Overflow

Added: 08/07/2014 CVE: CVE-2014-4158 BID: 68195 OSVDB: 108090 Background SENKAS Kolibri Webserver is a free very simple web server for Microsoft Windows that supports serving static web content. Problem Kolibri Webserver is vulnerable to a stack buffer overflow as a result of failure to properly...

Kolibri WebServer HTTP GET Request Handling Buffer Overflow

Added: 08/07/2014 CVE: CVE-2014-4158 BID: 68195 OSVDB: 108090 Background SENKAS Kolibri Webserver is a free very simple web server for Microsoft Windows that supports serving static web content. Problem Kolibri Webserver is vulnerable to a stack buffer overflow as a result of failure to properly...

Kolibri WebServer HTTP GET Request Handling Buffer Overflow

Added: 08/07/2014 CVE: CVE-2014-4158 BID: 68195 OSVDB: 108090 Background SENKAS Kolibri Webserver is a free very simple web server for Microsoft Windows that supports serving static web content. Problem Kolibri Webserver is vulnerable to a stack buffer overflow as a result of failure to properly...

CVE-2014-4971

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to 1 the MQAC.sys driver in the MQ Access Control subsystem...

Memory corruption

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to 1 the MQAC.sys driver in the MQ Access Control subsystem...

Immunity Canvas: MQAC

Name| mqac ---|--- CVE| CVE-2014-4971 Exploit Pack| CANVAS Description| mqac Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt CVE Name: CVE-2014-4971 VENDOR: Microsoft Notes: Tested on: Windows XP Professional SP3 English Constraints: In order to work the...

CVE-2014-4971

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to 1 the MQAC.sys driver in the MQ Access Control subsystem...

CVE-2014-4971

CVE-2014-4971 affects Microsoft Windows XP SP3 and relates to two drivers: MQAC.sys in the MQ Access Control subsystem and BthPan.sys in Bluetooth PAN. The vulnerability arises because certain IRP/IOCTL handling does not validate addresses, enabling local attackers to write to arbitrary memory lo...

CVE-2014-4971: Improper Input Validation

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to 1 the MQAC.sys driver in the MQ Access Control subsystem...

PT-2014-1737

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Description The issue allows local users to gain privileges by writing data to arbitrary memory locations via a crafted address in an IOCTL call. This is related to the MQAC.sys driver in the MQ Access Control subsyste...

BulletProof FTP Client 2010 Buffer Overflow

----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Windows XP SP3 CVE: CVE-2014-2973...

Microsoft Windows XP SP3 - 'MQAC.sys' Arbitrary Write Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'MQAC.sys Arbitrary Write Privilege Escalation', 'Description' = %q A vulnerability within the MQAC.sys module allows an...

MQAC.sys Arbitrary Write Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'MQAC.sys Arbitrary Write Privilege Escalation', 'Description' = %q A vulnerability within the MQAC.sys module allows an...

Microsoft XP SP3 - BthPan.sys Arbitrary Write Privilege Escalation

No description provided by source. """ Title: Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-002 Publication Date: 2014-07-18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt 1. Vulnerability Details Affected Vendor:...

BulletProof FTP Client 2010 - Buffer Overflow (SEH)

BulletProof FTP Client 2010 suffers from a buffer overflow vulnerability. ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link:...

BulletProof FTP Client 2010 - Buffer Overflow (SEH) (PoC)

----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Windows XP SP3 CVE: CVE-2014-2973...

BulletProof FTP Client 2010 - Buffer Overflow (SEH) (PoC)

BulletProof FTP Client 2010 - Buffer Overflow SEH PoC ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Jul 24 2014 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version:...

BulletProof FTP Client BPS Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in BulletProof FTP Client 2010, caused by an overly long hostname. By persuading the victim to open a specially-crafted .BPS file, a remote attacker could execute arbitrary code on the system or cause the application to crash. This...