KMPlayer 3.0.0.1440 Buffer Overflow

!/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html Tested On...

The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow (Win7+ASLR bypass mod)

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link:...

The KMPlayer 3.0.0.1440 (Windows 7) - .mp3 Local Buffer Overflow (ASLR Bypass)

The KMPlayer 3.0.0.1440 Windows 7 - .mp3 Local Buffer Overflow ASLR Bypass !/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link...

The KMPlayer 3.0.0.1440 (Windows 7) - '.mp3' Local Buffer Overflow (ASLR Bypass)

!/usr/bin/python Exploit Title: The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit Win7 + ASLR bypass Date: Jun 10th, 2011 Authors: dookie and ronin initial XPSP3 DEP bypass PoC xsploitedsec Win7 + ASLR mod Software Link: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html Tested On...

Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers

Overview Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description Autonomy Keyview IDOL is a set of libraries that can decode over 1,000 different file formats. The...

kernel security update

CentOS Errata and Security Advisory CESA-2011:0833 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

kernel: proc: protect mm start_code/end_code in /proc/pid/stat

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Magix Musik Maker 16 - .mmm Local Stack Buffer Overflow (Without EggHunter) (Metasploit)

Magix Musik Maker 16 - .mmm Local Stack Buffer Overflow Without EggHunter Metasploit --- My version of exploit... Looks like bug the same as in: http://www.exploit-db.com/exploits/17313/ My exploit does not use egg-hunter, so it must be faster, but i have limited size for payload - 750 bytes 8...

Gadu-Gadu Code Execution / Cross Site Scripting

Vendor: Gadu-Gadu http://gadu-gadu.pl Vulnerable Version: All Vulnerability Type: XSS, Remote Code Execution Risk level: Very High Credit: Kacper Szczesniak Vulnerability Details: Gadu-Gadu improperly handles file transfer requests. It's possible to place 255 chars of HTML code no slash inside th...

PHP Socket connect() Stack Buffer Overflow

Hi there, This is a quick writeup about some fun with apache based on CVE-2011-1938 that was disclosed yesterday. While the first POC was literally just a trivial POC - the second one was written for self-educational purposes we leared quite a lot which is the most important thing and we hope it...

VisiWave VWR File Parsing Vulnerability

This module exploits a vulnerability found in VisiWave's Site Survey Report application. When processing .VWR files, VisiWaveReport.exe attempts to match a valid pointer based on the 'Type' property valid ones include 'Properties', 'TitlePage', 'Details', 'Graph', 'Table', 'Text', 'Image', but if...

Google Chrome 'Sandbox' Remote Code Execution Vulnerability (Windows)

The host is installed Google Chrome and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromesandboxcodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome 'Sandbox' Remote Code Execution Vulnerability Windows Authors: Madhuri D Copyright:...

Magix Musik Maker 16 .mmm Stack Buffer Overflow

Exploit for windows platform in category local exploits $Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

VisiWave VWR File Parsing Trusted Pointer Vulnerability

Exploit for windows platform in category local exploits $Id: visiwavevwrtype.rb 12716 2011-05-25 13:57:12Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Magix Musik Maker 16 .mmm Stack Buffer Overflow

$Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Google Chrome 'Sandbox' Remote Code Execution Vulnerability - Windows

Google Chrome is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Magix Musik Maker 16 .mmm Stack Buffer Overflow

This module exploits a stack buffer overflow in Magix Musik Maker 16. When opening a specially crafted arrangement file .mmm in the application, an unsafe strcpy will allow you to overwrite a SEH handler. This exploit bypasses DEP & ASLR, and works on XP, Vista & Windows 7. Egghunter is used, and...

Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Metasploit)

$Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Releases Version 2.1 of EMET Mitigation Toolkit

Microsoft has released a new version of its Enhanced Mitigation Experience Toolkit, a free download that gives IT staffs the ability to better defend against exploit attempts. The EMET now includes support, as well. EMET is a toolkit that essentially is designed to add exploit mitigation...