Microsoft Windows Media Encoder Insecure Library Loading (MS10-094; CVE-2010-3965)

Microsoft Windows Media Encoder is a production tool for converting both live and prerecorded audio and video to Windows Media Format. A remote code execution vulnerability has been reported in the way that Microsoft Office handles the loading of DLL files. The vulnerability is caused when the...

SnackAmp 3.1.3 SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.3 Malicious SMP Buffer Overflow Vulnerability SEH Date: 12/12/10 Author: james AT learnsecurityonline DOT com Software Link: http://snackamp.sourceforge.net/ Version: 3.1.3 Tested on: Windows XP SP3 EN CVE: N/A This version was just released as of 12/5/10 ! /usr/bin/en...

OTSTurntables 1.00.048 (m3u/ofl) Local BOF Exploit (SEH)

Exploit for windows platform in category local exploits ======================================================== OTSTurntables 1.00.048 m3u/ofl Local BOF Exploit SEH ======================================================== Exploit Title: OTSTurntables 1.00.028 m3u/ofl Local BOF Exploit SEH Date:...

Xion Audio Player 1.0.127 Buffer Overflow

Exploit Title: Xion Audio Player 1.0.127 m3u Buffer Overflow Vulnerability Date: 11/23/2010 Author: 0v3r Software Link: http://www.r2.com.au/downloads/files/xionv1.0b127.exe Version: 1.0.127 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python encoded with alpha3 encoder by skylined egghunter =...

Sothink Video Encoder For Adobe Flash DLL Hijacking

=================================================== Sothink Video Encoder for Adobe Flash DLL Hijacking Exploit dwmapi.dll =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Sothink Video Encoder for Adobe Flash DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ======================================================================== Sothink Video Encoder for Adobe Flash DLL Hijacking Exploit dwmapi.dll ======================================================================== || || | || o,7 || . o7 |...

Amlibweb NetOpacs - 'webquery.dll' Remote Stack Buffer Overflow (Metasploit)

$Id: amlibwebwebquerydllapp.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Free CD to MP3 Converter 3.1 - Local Buffer Overflow (SEH)

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

Minishare 1.5.5 Buffer Overflow

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability SEH Date: 11/03/2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.4.0 - 1.5.5 Tested on: Windows XP SP3 EN VMWARE FUSION -...

printf(1) via PHP magic_quotes Utility Command Encoder

This encoder uses the printf1 utility to avoid restricted characters. Some shell variable substitution may also be used if needed symbols are blacklisted. Some characters are intentionally left unescaped since it is assumed that PHP with magicquotesgpc enabled will escape them during request...

MSN Messenger 8.1 DLL Hijacking Exploit (lPK.dll)

Exploit for windows platform in category local exploits ================================================= MSN Messenger 8.1 DLL Hijacking Exploit lPK.dll ================================================= / Exploit Title: MSN Messenger 8.1 DLL Hijacking Exploit lPK.dll Date: Octobre 7, 2010 Author...

MySQl 5.1 DLL Hijacking Exploit (lPK.dll)

Exploit for windows platform in category local exploits ========================================= MySQl 5.1 DLL Hijacking Exploit lPK.dll ========================================= / Exploit Title: MySQl 5.1 DLL Hijacking Exploit lPK.dll Date: Octobre 6, 2010 Author: Mu$lim email protected Version...

MySQl 5.1 DLL Hijacking Exploit (lPK.dll)

No description provided by source. ========================================= MySQl 5.1 DLL Hijacking Exploit lPK.dll ========================================= / Exploit Title: MySQl 5.1 DLL Hijacking Exploit lPK.dll Date: Octobre 6, 2010 Author: Mu$lim [email protected] Version: 5.1 Tested on:...

ASP.NET Padding Oracle Vulnerability (MS10-070)

Exploit for windows platform in category remote exploits =============================================== ASP.NET Padding Oracle Vulnerability MS10-070 =============================================== Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html...

Windows Media Encoder 9 Series DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================================== Windows Media Encoder 9 Series DLL Hijacking Exploit ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Novell Messenger Server 2.0 - Accept-Language Overflow (Metasploit)

$Id: novellmessengeracceptlang.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Audiotran 1.4.2.4 - Local Overflow (SEH) (DEP Bypass)

Exploit Title: Audiotran 1.4.2.4 SEH Overflow Exploit DEP Bypass Date: 09/20/10 Credit/Bug found by : Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Author: Muhamad Fadzil Ramli - mind1355 at gmail dot com Software Link: http://www.e-soft.co.uk/Audiotran.htm Version:...

SnackAmp 3.1.2 SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability SEH Date: 08/28/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.2 Tested on: Windows XP SP3 EN CVE: N/A Shoutz to MC, Thanks bro! ! /usr/bin/env ruby nSE...

A-PDF WAV to MP3 1.0.0 - Universal Local (SEH)

A-PDF WAV to MP3 1.0.0 - Universal Local SEH !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference:...

EasyFTP Server 1.7.0.11 - (Authenticated) Multiple Commands Remote Buffer Overflows

Exploit Title: Easy FTP Server v1.7.0.11 Multiple Command Buffer Overflow Date: August 12, 2010 Author: Glafkos Charalambous Software Link: http://easyftpsvr.googlecode.com/files/easyftp-server-1.7.0.11-en.zip Version: 1.7.0.11 Tested on: Windows XP SP3 En Vulnerable Commands: DELE, STOR, RNFR,...