GSM SIM Utility 5.15 - '.sms' File Local Buffer Overflow (SEH)

Exploit Title : GSM SIM Utility sms file Local SEH BoF Date : June 28, 2010 Author : chap0 www.seek-truth.net Download Link : http://download.cnet.com/GSM-SIM-Utility/3000-185084-10396246.html?tag=mncol Version : 5.15 OS : Windows XP SP3 Type of vuln : SEH Greetz to : Corelan Security Team Specia...

NetWorld Alliance portal SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== NetWorld Alliance portal SQL Injection Vulnerability ==================================================== EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code...

FieldNotes 32 v5.0 Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ======================================== FieldNotes 32 v5.0 Buffer Overflow SEH ======================================== !/usr/bin/python Title: FieldNotes 32 v5.0 SEH 0day Date: 25/06/2010 Author: TecR0c - http://tecninja.net/blog aka Rocco...

FieldNotes 32 5.0 - Local Buffer Overflow (SEH)

FieldNotes 32 5.0 - Local Buffer Overflow SEH !/usr/bin/python Title: FieldNotes 32 v5.0 SEH 0day Date: 25/06/2010 Author: TecR0c - http://tecninja.net/blog aka Rocco Calvi Found by: TecR0c - http://twitter.com/TecR0c Advisory: http://www.corelan.be:8866/advisories.php?id=CORELAN-10-053 Platform:...

FieldNotes 32 5.0 - Local Buffer Overflow (SEH)

!/usr/bin/python Title: FieldNotes 32 v5.0 SEH 0day Date: 25/06/2010 Author: TecR0c - http://tecninja.net/blog aka Rocco Calvi Found by: TecR0c - http://twitter.com/TecR0c Advisory: http://www.corelan.be:8866/advisories.php?id=CORELAN-10-053 Platform: Windows XP sp3 En Greetz to: Corelan Security...

SA-CONTRIB-2010-069 - Case Tracker - Multiple Vulnerabilities

The Case Tracker module enables teams to track outstanding cases which need resolution by attaching a status, priority and type. Cross Site Scripting XSS The module does not sanitize some of the user-supplied data before displaying it, leading to a cross site scripting XSS vulnerability that may...

Rising Tide Media LLC CMS SQL Injection

Rising Tide Media LLC CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / /...

SA-CONTRIB-2010-068 - Masquerade - Cross Site Request Forgery

The masquerade module is designed as a tool for site designers and administrators, allowing a user with the right permissions to temporarily masquerade as another user. The module is vulnerable to Cross Site Request Forgeries CSRF via the masquerade/switch and masquerade/unswitch paths. Versions...

FRONT NATIONAL SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== FRONT NATIONAL SQL Injection Vulnerability ========================================== Title : FRONT NATIONAL SQL Injection Vulnerability Author: Net.Edit0r Data : 2010-06-22 InformatioN Title : FRONT...

CVE-2010-1622: Spring Framework execution of arbitrary code

CVE-2010-1622: Spring Framework execution of arbitrary code Severity: Critical Vendor: SpringSource, a division of VMware Versions Affected: 3.0.0 to 3.0.2 2.5.0 to 2.5.6.SEC01 community releases 2.5.0 to 2.5.7 subscription customers Earlier versions may also be affected Description: The Spring...

Winamp 5.572 EIP / SEH DEP Bypass Buffer Overflow

!/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to: Corelan Security Team...

BlazeDVD 5.1 Stack Buffer Overflow With ASLR/DEP Bypass

!/usr/bin/python BlazeDVD v5.1 .plf Stack Buffer Overflow PoC exploit - ALSR/DEP bypass on win7 Author: mrme - https://net-ninja.net - mrmeATcorelan.be - @StevenSeeley Download: http://www.blazevideo.com/ Tested on windows 7 version N - DEP = AlwaysOn Greetz: Corelan Security Team...

Winamp v5.572 local BOF exploit (EIP & SEH DEP Bypass)

No description provided by source. !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to: Corelan Security Team...

Spring Framework - Arbitrary code Execution

Spring Framework - Arbitrary code Execution CVE-2010-1622: Spring Framework execution of arbitrary code Severity: Critical Vendor: SpringSource, a division of VMware Versions Affected: 3.0.0 to 3.0.2 2.5.0 to 2.5.6.SEC01 community releases 2.5.0 to 2.5.7 subscription customers Earlier versions ma...

Winamp 5.572 - Local Buffer Overflow (EIP + SEH) (DEP Bypass)

Winamp 5.572 - Local Buffer Overflow EIP + SEH DEP Bypass !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to:...

BlazeDVD v5.1 (.plf) Stack Buffer Overflow PoC Exploit - ALSR/DEP Bypass

Exploit for windows platform in category local exploits ======================================================================== BlazeDVD v5.1 .plf Stack Buffer Overflow PoC Exploit - ALSR/DEP Bypass ======================================================================== !/usr/bin/python BlazeDV...

BlazeDVD 5.1 (Windows 7) - .plf File Stack Buffer Overflow (ASLR + DEP Bypass)

BlazeDVD 5.1 Windows 7 - .plf File Stack Buffer Overflow ASLR + DEP Bypass !/usr/bin/python BlazeDVD v5.1 .plf Stack Buffer Overflow PoC exploit - ALSR/DEP bypass on win7 Author: mrme - https://net-ninja.net - mrmeATcorelan.be - @StevenSeeley Download: http://www.blazevideo.com/ Tested on windows...

Sygate Personal Firewall 5.6 Build 2808 Active-X Exploit

seh = unescape"%13%16%47%06" 'ADD ESP,46C RETN rop = rop + String72, "D" 'J...

Power Tab Editor 1.7 Buffer Overflow

Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wife for her support Congratz to marko...

CP3 Studio PC Version - Denial of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...