Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista SP2/SP1 only, should be reliable! Tested on: Vista sp2 6.0.6002.18005 Vista sp1 ultimate...

Mediacoder 0.7.5.4710 Buffer Overflow

media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/ !/usr/bin/python to exploit load...

Windows win32k.sys驱动用户池溢出本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42245 CVE ID: CVE-2010-1895 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动在从用户态进行拷贝时没有正确地分配内存，导致权限提升。成功利用这个漏洞的攻击者可以执行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Server 2003 SP2 厂商补丁： Microsoft...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

Windows win32k.sys驱动用户输入验证本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42210 CVE ID: CVE-2010-1896 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证用户态输入，本地用户可以通过执行恶意应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft...

Windows win32k.sys驱动边界检查本地拒绝服务漏洞（MS10-048）

BUGTRAQ ID: 42250 CVE ID: CVE-2010-1887 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证传送给系统调用的参数，本地用户可以通过运行特制的应用程序来利用这个漏洞导致系统变得没有响应并自动重启。 Microsoft Windows XP SP3 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Server...

Rosoft Media Player 4.4.4 Buffer Overflow

rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/...

Input validation

The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Kernel Improper Validation Vulnerability....

CVE-2010-1894

Win32k Exception Handling Vulnerability (CVE-2010-1894) affects Windows XP SP2/SP3 and Windows Server 2003 SP2 via win32k.sys. Description: the kernel-mode driver does not properly handle certain exceptions, enabling local privilege escalation by a crafted application. Impact: attacker could exec...

CVE-2010-1896

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted...

Mediacoder 0.7.5.4710 Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================= Mediacoder 0.7.5.4710 Buffer Overflow Exploit ============================================= media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link...

Windows XP SP2 Registry Hack Gets Updates

People still running the now-retired Windows XP Service Pack 2 SP2 can trick the operating system into installing security updates, finds a researcher. Read the full article. Computerworld...

Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)

Rosoft Media Player 4.4.4 - Buffer Overflow SEH PoC rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilenam...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

Rosoft media player 4.4.4 SEH buffer overflow POC

Exploit for windows platform in category dos / poc ================================================= Rosoft media player 4.4.4 SEH buffer overflow POC ================================================= rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link...

Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)

rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Quintessential Media Player 5.0.121 - .m3u Buffer Overflow

Quintessential Media Player 5.0.121 - .m3u Buffer Overflow source: https://www.securityfocus.com/bid/42307/info Quintessential Media Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to...

kleeja 1.0.0RC6 - Database Disclosure

kleeja 1.0.0RC6 - Database Disclosure ==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug :...

dBpowerAMP Audio Player 2 (FileExists) ActiveX Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ====================================================================== dBpowerAMP Audio Player 2 FileExists ActiveX Buffer Overflow Exploit ====================================================================== ' Exploit Title: dBpowerAMP...

Quintessential Player 5.0.121 Denial of Service

Exploit for windows platform in category dos / poc =============================================== Quintessential Player 5.0.121 Denial of Service =============================================== vulnerble application link http://www.quinnware.com/downloads.php tested on XP SP2/3 author abhishek...