4295 matches found
Windows Media Player 9.0 ActiveX Control Media File Attribute Corruption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence...
Microsoft Windows XP/VISTA/2003/2008 - WMI Service Isolation Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC
No description provided by source. !/usr/bin/python Buffer Overflow Long transporting mode Vulnerability Exploit This is just a DoS exploiting code Tested on Windows xp SP2 Requires python and impacket Coded by Liu Qixu Of NCNIPC SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Window...
MS Word - Record Parsing Buffer Overflow MS09-027 (meta)
No description provided by source. $Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb...
DJ Studio Pro 8.1.3.2.1 - SEH Exploit
No description provided by source. DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (2)
No description provided by source. exploit.py Beatport Player 1.0.0.283 .M3U File Local Stack Overflow Exploit By: Encrypt3d.M!nd Tested on : Windows xp sp2 chars = \x41 1232 ns = \xEB\x06\x90\x90 sh = \x35\x2F\xD1\x72 nops = \x90 20 win32exec - EXITFUNC=thread CMD=calc.exe Size=351...
Citrix Presentation Server Client WFICA.OCX ActiveX - Heap BOF Exploit
No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...
Linux Kernel 2.4/2.6 - sock_sendpage() Local Root Exploit (PPC Edition)
No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...
SonicWALL GMS 6 Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Microsoft Internet Explorer 6.0 TABLE Status Bar URI Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attack...
Winamp <= 5.34 .MP4 File Code Execution Exploit
No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicate...
Nemesis Player (NSP) Local Denial of Service (DoS) Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Nemesis Player NSP Local Denial of Service DoS Vulnerability Author:Vulnerability Discovered By Rehan Ahmed [email protected] Vendor:http://www.nsplayer.org Version:1.1 Beta/2.2 Tested On: WinXP SP2 my $boom=\x41 x 5000; my...
mmPlayer 2.2 (.m3u) Local Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/perl Title: mmPlayer 2.2 .m3u Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= RjRjh.m3u; my $junk= \x41 x 4090; my $nextseh=...
Winamp 5.12 (.m3u) - Stack Based Buffer Overflow
No description provided by source. Exploit Title: Winamp 5.12 .m3u stack based buffer overflow Date: 16 June 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.winamp.com/ Software Link: http://www.oldapps.com/winamp.php?oldwinamp=211 Version: 5.12 Tested o...
Sielco Sistemi Winlog <= 2.07.16 Buffer Overflow
No description provided by source. !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...
Xenorate 2.50 - (.xpl) universal Local Buffer Overflow Exploit (SEH) (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::Seh include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Xenorate 2.50.xpl universal Local Buffer Overflow...
Microsoft Windows XP CMD.EXE Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20652/info Microsoft Windows is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this...
IE wshom.ocx ActiveX Control Remote Code Execution
No description provided by source. IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 html p align=leftbfont face=Segoe...
JaMP Player 4.2.2.0 - Denial of Service Vulnerability
No description provided by source. Exploit Title: JaMP Player v4.2.2.0 .m3u DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/jamp-player2219088.html?hl=&ia=0 Version: v4.2.2.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename =...
Mediacoder 0.7.5.4710 Buffer Overflow Exploit
No description provided by source. media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 !/usr/bin/python to exploit load the crash.m3u file and double click on it filename = crash.m3u junk = \x41 256 eip =...