Sim Editor 6.6 Buffer Overflow

include include include define SIZE 65536 / Title: Sim Editor v6.6 Stack Based Buffer Overflow Version: 6.6 Tested on: Windows XP sp2 en, Windows 8 64-bit Date: 16-01-2015 Author: Osanda Malith Jayathissa E-Mail: osandacatunseen.is Website: OsandaMalith.wordpress.com / void addint count, unsigned...

Linux/x86-64 - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (110 bytes)

Linux/x86-64 - Add Map 127.1.1.1 google.lk In /etc/hosts Shellcode 110 bytes. Shellcode exploit for Linuxx86-64 platform / ; Title: Add map in /etc/hosts file - 110 bytes ; Date: 2014-10-29 ; Platform: linux/x8664 ; Website: http://osandamalith.wordpress.com ; Author: Osanda Malith Jayathissa...

Hamster Free ZIP Archiver 2.0.1.7 DLL Hijacking

/ Title: Hamster Free ZIP Archiver Dll Hijacking Exploit 2.0.1.7 dwmapi.dll Version: 2.0.1.7 Tested on: Windows XP SP2 en Vendor: http://www.hamstersoft.com/ Software-Link: http://www.hamstersoft.com/online/hfzasite/hfzasite30034b26122013.exe E-Mail: osandaatunseen.is Author: Osanda Malith...

Moodle 2.7 - Persistent XSS

No description provided by source. Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up:...

Moodle 2.7 - Persistent Cross-Site Scripting

Moodle 2.7 - Persistent Cross-Site Scripting Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up:...

Moodle 2.7 - Persistent Cross-Site Scripting

Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up: http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xs...

Moodle 2.7 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up:...

Ofilter Player 1.1 - (.wav) Integer Division by Zero

No description provided by source. ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda...

linux/x86 shutdown -h now Shellcode - 56 bytes

/ ; Title: shutdown -h now Shellcode - 56 bytes ; Date: 2014-06-27 ; Platform: linux/x86 ; Author: Osanda Malith Jayathissa @OsandaMalith Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 31 d2 xor edx,edx 8048064: 50 push eax 8048065: 66 68 2d 68 pushw 0x682d 8048069: ...

linux/x86 mkdir() 'haxor' and exit() Shellcode - 39 bytes

/ ; Title: mkdir 'haxor' and exit Shellcode - 39 bytes ; Platform: linux/x8664 ; Date: 2014-06-26 ; Author: Osanda Malith Jayathissa @OsandaMalith section .text global start start: jmp callshellcode shellcode: pop rsi xor rax, rax mov al, 0x53 mov rdi, rsi mov si, 0x1ed syscall xor rax, rax add...

Linux/x86-64 - shutdown -h now Shellcode (65 bytes)

Linux/x86-64 - shutdown -h now Shellcode 65 bytes. Shellcode exploit for Linuxx86-64 platform / ; Title: shutdown -h now x8664 Shellcode - 65 bytes ; Platform: linux/x8664 ; Date: 2014-06-27 ; Author: Osanda Malith Jayathissa @OsandaMalith section .text global start start: xor rax, rax xor rdx, r...

Linux/x86 - chmod 0777 /etc/shadow + Obfuscated Shellcode (51 bytes)

Linux/x86 - chmod 0777 /etc/shadow + Obfuscated Shellcode 51 bytes. Shellcode exploit for Linuxx86 platform / ; Title: chmod 0777 /etc/shadow a bit obfuscated Shellcode - 51 Bytes ; Platform: linux/x86 ; Date: 2014-06-22 ; Author: Osanda Malith Jayathissa @OsandaMalith section .text global start...

Bandizip不安全库加载漏洞

CVECAN ID: CVE-2014-1680 Bandizip是免费的轻量级Zip压缩软件。 Bandisoft Bandizip 3.10之前版本加载库（例如dwmapi.dll的方式不安全，攻击者通过诱使用户打开远程WebDAV或SMB共享上的文件，利用此漏洞可加载任意库。 0 bandisoft Bandizip 3.08 厂商补丁： bandisoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.bandisoft.com/bandizip/history/ / Exploit Title: Bandizip...

MyBB 1.6.12 POST Cross Site Scripting

alert/XSS/ " / document.exploit.submit;...

Ofilter Player WAV文件处理除零错误拒绝服务漏洞

Ofilter Player是一款简单易用的多媒体播放器。 Ofilter Player不正确处理畸形WAV文件，允许攻击者构建恶意文件，诱使应用程序解析，触发除零错误，可使应用程序崩溃。 0 Ofilter Player 1.1 目前没有详细解决方案提供： http://www.008soft.com/ ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Softwa...

Ofilter Player 1.1 - .wav Integer Division by Zero

Ofilter Player 1.1 - .wav Integer Division by Zero ?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug...

Ofilter Player 1.1 - '.wav' Integer Division by Zero

?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda Malith Twitter: @OsandaMalith /!...

Ofilter Player 1.1 Integer Division By Zero

?php / Title: Ofilter Player 1.1 .wav Integer Division by Zero Version: 1.1 Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link: http://www.008soft.com/downloadsOfilterPlayer.exe E-Mail: [email protected] Bug Discovered by: Osanda Malith Twitter: @OsandaMalith /!...

Windows Live Movie Maker 2011 Denial Of Service

!/usr/bin/env ruby Title: Windows Live Movie Maker 2011 .wav DoS Local Exploit Version: Version 2011 Build 15.4.53508.1109 Tested on: Windows 7 Professional 32-bit SP1 E-Mail: [email protected] Exploit-Author: Osanda Malith Jayathissa Video: https://www.youtube.com/watch?v=SBJYzSNdY6k /!...

Easy Karaokay Player 3.3.31 - .wav Integer Division by Zero

Easy Karaokay Player 3.3.31 - .wav Integer Division by Zero !/usr/bin/python Title: Easy Karaokay Player 3.3.31 .wav Integer Division by Zero Version: 3.3.31 Older Versions might be vulnerable as well Tested on: Windows XP SP2 en Vendor: http://www.008soft.com/ Software Link:...