Microsoft Word Record Parsing Buffer Overflow

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 Greets Villy, Abhishek Lyall and ASL IT SECURITY TEAM Author Abhishek Sahni - abhi00703atgmaildotcom, infoataslitsecuritydotcom Web -...

Mthree Development MP3 To Wav Decoder Denial Of Service

Exploit Title: Mthree Development MP3 to WAV Decoder .mp3 DoS Date: 10 / 8 / 2010 Author: Oh Yaw Theng Credit : ZAC0034m!n Software Link: http://www.mthreedev.com/setupmp3towav.exe Tested on: Windows XP SP 2 CVE : N / A Description : Create the malicious .mp3 file , open up using Mthree , after...

phpMUR - Remote File Disclosure

phpMUR - Remote File Disclosure Exploit Title: phpMUR Remote File Disclosure Date: 10/08/2010 Author: Offensive [email protected] Red-Stone On Inject0r Community ! Software Link: http://sourceforge.net/projects/phpmur Version : n/a Tested on: Windows XP C0nditi0ns : PHP Version 4.x.x Exploit Co...

clearBudget 0.9.8 - Remote File Inclusion

Exploit Title: clearBudget v0.9.8 Remote File Include Date: 10/08/2010 Author: Offensive [email protected] Red-Stone On Community ! Software Link: http://www.clearbudget.net Version : v0.9.8 Tested on: Windows XP C0nditi0ns : PHP Version 4.x.x Expl0it Code :...

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp;...

Zemana AntiLogger 'AntiLog32.sys' 1.5.2.755 - Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp; pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress = 0x1 ;...

Days of the edge of the school website system v1. 3 upload vulnerability-vulnerability warning-the black bar safety net

Open the admin directory, and found there a upload. asp, this file is submitted and the documents submitted for judgment, which has such a sentence if Uprequest. form"fileErr"0 then select case Uprequest. form"fileErr" But I saw a half day also did not see it this fileErr read what it is, and...

Zemana AntiLogger Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp; pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress = 0x1 ;...

WordPress Plugin myLDlinker SQL Injection

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Exploit Title: Word Press SQL Injection in myLDlinker.php Plugin Date: 23/07/2010 Author: H-SK33PY Software Link:...

ValidForm Builder script - Remote Command Execution

Exploit Title: ValidForm Builder script Remote Command Execution Vulnerability Date: 2010/07/23 Author: HackeR aRaR Email: [email protected] My Sites : www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://validformbuilder.googlecode.com/files/validformbuilderv.1.0.z...

WordPress Plugin myLDlinker - SQL Injection

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Exploit Title: Word Press SQL Injection in myLDlinker.php Plugin Date: 23/07/2010 Author: H-SK33PY Software Link:...

Max CMS2. 0beta (maxcms)SQL injection and administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net

This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...

OpenX - phpAdsNew Remote File Inclusion

OpenX - phpAdsNew Remote File Inclusion Exploit Title: OpenX phpAdsNew Remote File inclusion Vulnerability Date: 2010/07/20 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script url: http://www.opensourcescripts.com/dir/PHP/AdManagement/phpadsnew11.html...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK and PIF files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. A PIF file is a shortcut to a MS-DOS application. Clicking on a LNK or PIF file has...

PyroCMS 0.9.9.1 Cross Site Request Forgery

input type="hidden" name="btnAction" value="sav...

MP3 Cutter 1.5 - Denial of Service

MP3 Cutter 1.5 - Denial of Service Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.5 Crash Exploit Author: Prashant a.k.a t3rm!n4t0r c0ntact: [email protected] Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST exploit.py MP3 cutter Crash...

Hero DVD 3.0.8 Buffer Overflow

Exploit Title : Hero DVD Remote Buffer Overflow Exploit Date : July 7, 2010 Author : chap0 www.seek-truth.net Software Link : http://download.cnet.com/Hero-DVD-Player/3000-79704-10127412.html Version : 3.0.8 OS : Windows XP SP3 Greetz to : God the Creator, Sud0 Thanks Bro for the Support The Crew...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

Exploit for macOS platform in category remote exploits ======================================================= EvoCam Web Server OSX ROP Remote Exploit Snow Leopard ======================================================= !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import...

Unreal Engine 2.5 - 'UpdateConnectingMessage()' Remote Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/41424/info Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to...

Sun Java System Web Server Stack Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...