ALLPlayer 5.6.2 SEH Buffer Overflow

!/usr/bin/perl Exploit Title: ALLPlayer 5.6.2 .m3u - SEH Buffer Overflow Unicode Date: 10-22-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ALLPlayer 5.6.2 Software Link: http://www.allplayer.org/download/allplayer Version: 5.6.2 Tested On: Windows XP SP3 Credit to...

ALLPlayer 5.6.2 - .m3u File Local Buffer Overflow (SEH Unicode)

ALLPlayer 5.6.2 - .m3u File Local Buffer Overflow SEH Unicode !/usr/bin/perl Exploit Title: ALLPlayer 5.6.2 .m3u - SEH Buffer Overflow Unicode Date: 10-22-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ALLPlayer 5.6.2 Software Link:...

Plogue Sforzando 1.665 Buffer Overflow

!/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link: http://www.softpedia.com/dyn-postdownload.php?p=227357&t=0&i=1 Vendor site:...

IE Zero Day Watering Hole Attack Injects Malware into Memory

Microsoft may be promising a relatively light Patch Tuesday release tomorrow, but that doesn’t mean its researchers and developers won’t have their hands full. Not only is Microsoft busy on a patch for the TIFF zero day vulnerability reported two weeks ago, but now another previously unreported...

Internet Explorer zero-day vulnerability actively being exploited in the wild

Security researchers at FireEye have detected a new series of drive-by attacks based on a new Internet Explorer zero-day vulnerability. The attackers breached a website based in the US to deploy the exploit code to conduct a classic watering hole attack. The discovery was announced just a few day...

[SET v5.4] The Social-Engineer Toolkit "Walkers"

TrustedSec is proud to announce the release of The Social-Engineer Toolkit SET v5.4 codename “Walkers”. This version has a significant amount of changes, performance upgrades, bug fixes, and efficiency. This blog post will cover some of the major highlights from Java 7 Update 45 and how to get...

Attacks on New Microsoft Zero Day Using Multi-Stage Malware

Attackers exploiting the Microsoft Windows and Office zero day revealed yesterday are using an exploit that includes a malicious RAR file as well as a fake Office document as the lure, and are installing a wide variety of malicious components on newly infected systems. The attacks seen thus far a...

MIPS Little Endian - Reverse Shell Shellcode Linux

MIPS Little Endian - Reverse Shell Shellcode Linux. Shellcode exploit for hardware platform MIPS Little Endian Reverse Shell ASM File and Assembled Shellcode Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Website:...

Egg Hunting Staged Shellcode High Ports Remote Code Execution

Egg Hunting is a staged shellcode technique. A remote attacker can use Egg Hunting to cause a stack-based overflow on the target. Successful implementation will allow attackers to execute shellcode on a remote machine...

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

Plogue Sforzando 1.665 - Buffer Overflow SEH PoC !/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link:...

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

!/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link: http://www.softpedia.com/dyn-postdownload.php?p=227357&t=0&i=1 Vendor site:...

Egg Hunting Staged Shellcode Remote Code Execution

Egg Hunting is a staged shellcode technique. A remote attacker can use Egg Hunting to cause a stack-based overflow on the target. Successful implementation will allow attackers to execute shellcode on a remote machine...

AudioCoder 0.8.22 (.m3u) - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: AudioCoder 0.8.22 .m3u - SEH Buffer Overflow Date: 10-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: AudioCoder 0.8.22 http://www.mediacoderhq.com/audio/ Software Link:...

AudioCoder 0.8.22 SEH Buffer Overflow

!/usr/bin/perl Exploit Title: AudioCoder 0.8.22 .m3u - SEH Buffer Overflow Date: 10-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: AudioCoder 0.8.22 http://www.mediacoderhq.com/audio/ Software Link: http://www.fosshub.com/download/AudioCoder-0.8.22.5506.exe...

Watermark Master 2.2.23 Buffer Overflow

!/usr/bin/python Exploit Title:Watermark Master Buffer Overflow SEH Date found: 31.10.2013 Exploit Author: metacom URL:http://www.videocharge.com/download.php Software Link:www.videocharge.com/download/WatermarkMasterInstall.exe Version: 2.2.23 Vulnerable products:Watermark Master and Watermark...

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow !/usr/bin/perl -w Exploit Title: WatchGuard Firewall XTM version 11.7.4u1 - Remote buffer overflow exploit sessionid cookie Date: Oct 18 2013 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow

!/usr/bin/perl -w Exploit Title: WatchGuard Firewall XTM version 11.7.4u1 - Remote buffer overflow exploit sessionid cookie Date: Oct 18 2013 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.watchguard.com Version: = 11.7.4u1 Tested on: XTMv CVE :...

Photodex ProShow Producer 5.0.3310 - Local Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: Photodex ProShow Producer v5.0.3310 - Local Buffer Overflow SEH Date: 10-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Photodex ProShow Producer v5.0.3310 Software Link:...

Photodex ProShow Producer 5.0.3310 - Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: Photodex ProShow Producer v5.0.3310 - Local Buffer Overflow SEH Date: 10-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Photodex ProShow Producer v5.0.3310 Software Link: http://files.photodex.com/release/pspro503310.exe Version:...

D-Link DIR-605L - Captcha Handling Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Boa/ include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DIR-605L Captcha Handling...