Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP)

Steinberg MyMp3PRO 5.0 - Local Buffer Overflow SEH DEP Bypass + ROP !/usr/bin/ruby print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 eip=0x7C86467B.pack'V'7C86467B FFE4 JMP E...

Kingsoft Office Writer 2012 8.1.0.3385 Buffer Overflow

Kingsoft Office Writer 2012 version 8.1.0.3385 SEH buffer overflow exploit that creates a malicious .wps file that pops calc.exe. !/usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 .wps Buffer Overflow Exploit SEH Version: 2012 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahren...

VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)

!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN ''' sleep3...

SikaBoom - Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SikaBoom Remote Buffer overflow',...

NextGEN Gallery 1.9.12 Shell Upload

S21Sec Advisory - Title: NextGEN Gallery 1.9.12 Arbitrary File Upload ID: S21SEC-046-en CVE ID: CVE-2013-3684 Severity: High Status: Fixed History: 27.May.2013 Vulnerability discovered 28.May.2013 Vendor informed 12.Jun.2013 Fix released Authors: Marcos Agüero [email protected] URL:...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.23.1 - Parallel mtrr init between cpus Zhenzhong Duan Orabug: 16777774 - Merge tag 'v2.6.39-400.21.1.16748891' of git://ca-git.us.oracle.com/linux-uek-2.6.39-ofed into uek-2.6.39-400 Maxim Uvarov Orabug: 16748891 - xen-blkfront: use a different scatterlist for each request Roger Pau...

The KMPlayer v3.3.0.33 Multiple Vulnerabilities

Stack Based Buffer Overflow Vulnerability DLL Hijacking Vulnerability Exploit Title: The KMPlayer Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN...

KMPlayer 3.3.0.33 - Multiple Vulnerabilities

Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN Buffer Overflow Vulnerability: junk = "\x41" 250 eip =...

Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept

Exploit for windows platform in category dos / poc Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...

Zimplit CMS 3.0 - Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53990/info Zimplit CMS is prone to multiple local file-include vulnerabilities and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context...

Remote Anything Player 5.60.15 Denial Of Service

!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...

mmPlayer 2.2 - '.ppl' Local Buffer Overflow (SEH)

!/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.ppl"; my $junk= "\x41" x 4090; my $nextseh= "\xEB\x06\x90\x90"; my $seh=...

jetVideo 8.0.2 - Denial of Service

jetVideo 8.0.2 - Denial of Service Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload...

Mozilla Firefox 10.0 Local Null Byte Bypass File Check Execution

...

PDF Viewer Component - ActiveX Denial of Service

PDF Viewer Component - ActiveX Denial of Service Title : PDF Viewer Component ActiveX DoS Auther : Senator of Pirates E-Mail : [email protected] FaceBook : FaceBook.Com/SenatorofPirates Software link : http://www.ocxt.com/download/PDFViewerSetup.exe Date : 05/02/2012 Tested :...

Edraw Diagram Component 5 ActiveX buffer overflow DoS

Exploit for windows platform in category dos / poc Author : Senator of Pirates This exploit tested on Windows Xp SP3 EN http://www.edrawsoft.com/download/EDBoardSetup.exe -------------------------------------------------------------------------------------------------------- targetFile =...

Unfixed XSS vulnerability at www.chirac-en-lozere.com

Security researcher Atmon3r, has submitted on 31/01/2012 a cross-site-scripting XSS vulnerability affecting www.chirac-en-lozere.com, which at the time of submission ranked 21348297 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It...

Phonebook (.pbk) Remote Access DoS Vulnerability

Exploit for windows platform in category dos / poc Name: Remote Access Phonebook .pbk DoS Vulnerability Type: Windows Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows XP SP3 EN Exploit: 1- Create network connections 2- Open pbk file with text editors and replace this code...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

FCMS 2.7.2 Cross Site Scripting

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...