Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

This module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX. When sending an invalid pointer to the extSetOwner function of UfPBCtrl.dll an attacker may be able to execute arbitrary code. Module Options msf use...

BS.Player 2.56 build 1043 - 'mfc71loc.dll' DLL Hijacking

/ Exploit Title: BS.Player DLL Hijacking Exploit mfc71loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.bsplayer.org Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID...

Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking

/ Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o rpawinet.dll PowerPoint-DLL.c .odp, .pothtm...

Microsoft Excel Featheader Buffer Overflow

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerble application MS office 2003/2007 Tested on XP SP2 ...

Abyssal Metal Player 2.0.9 Denial Of Service

Exploit Title: Abyssal Metal Player 2.0.9 DoS Date: 23/08/2010 Author: 41.w4r10r Version: 2.0.9 Tested on : Windows XP SP2 Eng Software Link: http://www.abyssalsoft.com/files/download.php?id=15 !/usr/bin/python Abyssal Metal Player is Media File Player which Plays many Media Files such as .Mp3 ,...

Abyssal Metal Player 2.0.9 Denial of Service

Exploit for windows platform in category dos / poc ============================================ Abyssal Metal Player 2.0.9 Denial of Service ============================================ Exploit Title: Abyssal Metal Player 2.0.9 DoS Date: 23/08/2010 Author: 41.w4r10r Version: 2.0.9 Tested on :...

ECShop v2.7.2 (FCKeditor Remote Upload File) Exploit

Exploit for asp platform in category web applications ==================================================== ECShop v2.7.2 FCKeditor Remote Upload File Exploit ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Microsoft Excel - FEATHEADER Record (MS09-067)

Microsoft Excel - FEATHEADER Record MS09-067 MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwi...

Microsoft Excel - FEATHEADER Record (MS09-067)

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec cmd.exe + ExitProcess Shellcode - 1...

Microsoft Word Record Parsing Buffer Overflow

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 Greets Villy, Abhishek Lyall and ASL IT SECURITY TEAM Author Abhishek Sahni - abhi00703atgmaildotcom, infoataslitsecuritydotcom Web -...

PlayPad Music Player 1.12 - .mp3 Denial of Service

PlayPad Music Player 1.12 - .mp3 Denial of Service Exploit Title: PlayPad Music Player v1.12 .mp3 File Processing BoF/Crash Date: 20th August, 2010 Author: Praveen Darshanam Software Link:...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...

Joomla! Component com_extcalendar - Blind SQL Injection

Joomla! Component comextcalendar - Blind SQL Injection 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author :...

Joomla Component com_extcalendar Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================== Joomla Component comextcalendar Blind SQL Injection Vulnerability ================================================================== Date: 20/08/2010 0 Author : Lagripe-Dz 1...

Joomla! Component com_extcalendar - Blind SQL Injection

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Joomla Component comextcalendar Blind SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 Date: 20/08/2010 0 Author : Lagripe-Dz 1 contact : [email protected] 8 Home :...

Joomla Equipment SQL Injection

Exploit Title : Joomla "comequipment" Sql Injection Vulnerability Date : 16 - 8 - 2010 Author : Forza-Dz Vendor : http://joomlaequipment.com/ Version : All Versions Tested on : Win Sp2 and Mac Dork = inurl:"comequipment" --- SQL Injection Vulenrability --- SQL Injection Vulenrability component...

Microsoft Word RTF解析引擎远程内存破坏漏洞（MS10-056）

BUGTRAQ ID: 42132 CVE ID: CVE-2010-1901 Word是微软Office套件中的文字处理工具。 在处理包含有某些控制字的RTF文档时，RTF解析引擎可能错误的从RTF文件读取值，导致内存破坏。成功利用此漏洞的攻击者可以获得与本地用户相同的权限。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Word 2002 SP3 临时解决方法： 以纯文本格式阅读电子邮件。...

Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference (MS09-050)

Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference MS09-050 Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...