Microsoft Remote Administration Protocol Server Name Buffer Overflow - Ver2 (CVE-2012-1853)

A buffer overflow vulnerability has been reported in the Remote Administration Protocol RAP implementation in the LanmanWorkstation service in Microsoft Windows XP SP3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

VCDGear 3.50 - .cue Local Stack Buffer Overflow

VCDGear 3.50 - .cue Local Stack Buffer Overflow !/usr/bin/ruby ''' Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied...

VCDGEAR 3.50 Stack Buffer Overflow

Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code...

VCDGear 3.50 - '.cue' Local Stack Buffer Overflow

!/usr/bin/ruby ''' Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to...

Music AlarmClock 2.1.0 Crash

------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/Music-AlarmClock/3000-23504-10419263.html Version: 2.1.0 Tested on:...

GoldMP4Player 3.3 - Buffer Overflow PoC (SEH)

Exploit for windows platform in category dos / poc --------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Gold MP4 Player 3.3 - Buffer Overflow (PoC) (SEH)

Gold MP4 Player 3.3 - Buffer Overflow PoC SEH --------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Music AlarmClock 2.1.0 - '.m3u' Crash (PoC)

------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/Music-AlarmClock/3000-23504-10419263.html Version: 2.1.0 Tested on:...

Music AlarmClock 2.1.0 - .m3u Crash (PoC)

Music AlarmClock 2.1.0 - .m3u Crash PoC ------------------------------------------------------------------------------------ Exploit Title: Music AlarmClock 2.1.0 .m3u Crash PoC Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

Gold MP4 Player 3.3 - Buffer Overflow (PoC) (SEH)

--------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Tested on: Window...

Ganib Project Management 2.3 - SQL Injection

Exploit title: Ganib 2.x SQLi Date: 02/02/2014 Exploit author: drone @dronesec More information: http://forelsec.blogspot.com/2014/02/ganib-project-management-23-multiple.html Vendor homepage: http://www.ganib.com/ Software link:...

haneWIN DNS服务器缓冲区溢出漏洞

BUGTRAQ ID: 65287 haneWIN DNS Server是Windows平台上的DNS服务器。 haneWIN DNS Server 1.5.3及其他版本在处理大量数据时存在SEH溢出，攻击者可利用此漏洞在应用上下文中执行任意代码。 0 hanewin haneWIN DNS Server 1.5.3 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.hanewin.net/dns-e.htm !/usr/bin/python Exploit Title: haneWIN DNS Server SEH...

ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link: http://ftp.sunet.se/pub/multimedia/graphics/ImageMagick/binaries/ Versio...

OneHTTPD 0.8 - Crash (PoC)

OneHTTPD 0.8 - Crash PoC Exploit Title: onehttpd 0.8 Crash PoC Date: Feb 7,2014 Exploit Author: Mahmod Mahajna Mahy Version: 0.8 Software Link: https://onehttpd.googlecode.com/files/onehttpd-0.8.exe Tested on: Windows XP SP3 Email: [email protected] from requests import get,ConnectionError as...

VLC 2.1.2 (.asf) - Crash PoC

Exploit for multiple platform in category dos / poc !/usr/bin/python VLC Media Player up to 2.1.2 DOS POC Integer Division By zero in ASF Demuxer VLC Media Player is prone to DOS utilizing a division by zero error if minimium data packet size is equal to zero. this was tested on windows XP sp3 an...

haneWIN DNS Server 1.5.3 - Buffer Overflow Exploit (SEH)

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: haneWIN DNS Server SEH Author: Dario Estrada dash https://intrusionlabs.org Date: 2014-01-29 Version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ Vulnerable app...

haneWIN DNS Server 1.5.3 - Remote Buffer Overflow (SEH)

haneWIN DNS Server 1.5.3 - Remote Buffer Overflow SEH !/usr/bin/python Exploit Title: haneWIN DNS Server SEH Author: Dario Estrada dash https://intrusionlabs.org Date: 2014-01-29 Version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ Vulnerable app...

HP Data Protector Backup Client Service opcode 42 directory traversal

Added: 01/28/2014 CVE: CVE-2013-6194 BID: 64647 OSVDB: 101630 Background HP OpenView Storage Data Protector is a backup solution for enterprise and distributed environments. Problem A vulnerability in the Backup Client Service OmniInet.exe allows remote, unauthenticated attackers to write files t...

HP Data Protector Backup Client Service Directory Traversal

This Metasploit module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists at the Backup Client Service OmniInet.exe when parsing packets with opcode 42. This Metasploit module has been tested successfully on HP Data Protector 6.20 ...

haneWIN DNS Server 1.5.3 - Denial of Service

Exploit Title: haneWIN DNS Server 1.5.3 - Denial of service Author: sajith version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ vulnerable app link:http://www.hanewin.net/dns-e.htm Tested in windows Xp sp3 POC by sajith shetty import socket target = "127.0.0.1" port = 53 try...