haneWIN DNS Server 1.5.3 Denial Of Service

Exploit Title: haneWIN DNS Server 1.5.3 - Denial of service Author: sajith version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ vulnerable app link:http://www.hanewin.net/dns-e.htm Tested in windows Xp sp3 POC by sajith shetty import socket target = "127.0.0.1" port = 53 try...

CCProxy 7.3整数溢出漏洞

CCProxy是国产代理服务器软件。 CCProxy在实现上存在整数溢出安全漏洞，成功利用后可导致未授权操作。 0 CCProxy CCProxy 7.3 厂商补丁： CCProxy ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ccproxy.com/ !/usr/bin/env python Exploit Title: CCProxy v7.3 Integer Overflow Exploit Date: 2013/03/22 Author: Mr.XHat E-Mail: Mr.XHat AT GMail.com...

CCProxy 7.3 - Integer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: CCProxy v7.3 Integer Overflow Exploit Date: 2013/03/22 Author: Mr.XHat E-Mail: Mr.XHat AT GMail.com Vendor Homepage: http://www.youngzsoft.net/ Software Link:...

CCProxy 7.3 - Integer Overflow

CCProxy 7.3 - Integer Overflow !/usr/bin/env python Exploit Title: CCProxy v7.3 Integer Overflow Exploit Date: 2013/03/22 Author: Mr.XHat E-Mail: Mr.XHat AT GMail.com Vendor Homepage: http://www.youngzsoft.net/ Software Link: http://user.youngzsoft.com/ccproxy/update/ccproxysetup.exe Version: Pri...

IBM Forms Viewer Unicode Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'IBM Forms Viewer Unicode Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer...

HP Data Protector Backup Client Service Directory Traversal

This module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists in the Backup Client Service OmniInet.exe and is triggered when parsing packets with opcode 42. This module has been tested successfully on HP Data Protector 6.20 on...

Total Video Player Denial Of Service

Total Video Player .rmvb Local Crash P.O.C Date : 31/12/2013 Author : JoKeRStEx Software Download link : http://od.ccm2.net/www.commentcamarche.net/download/files/cnettvcc131exe Tested 0N : WINDOWS XP SP3 !/usr/bin/python Crash buffer = "\x46\x48" 2014 FK File .rmvb filename = "2014.rmvb" crash =...

Cross site scripting

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-2504

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

Internet Download Manager 6.17 (.ef2) Memory Corruption

Exploit for windows platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site...

Denial of service

The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...

Microsoft Windows ndproxy.sys Local Privilege Escalation

Exploit for windows platform in category local exploits require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited...

Microsoft Windows ndproxy.sys Local Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

Microsoft Windows - 'ndproxy.sys' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Microsoft Windows ndproxy.sys Local Privilege Escalation', 'Description' = %q This module exploits a flaw in the...

PotPlayer 1.5.42509 Beta Denial Of Service

Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: ------- !/usr/bin/python rawinput"Hit Ente...

VUPlayer 2.49 - .m3u File Universal Buffer Overflow (DEP Bypass) (2)

VUPlayer 2.49 - .m3u File Universal Buffer Overflow DEP Bypass 2 VUPlayer 2.49 .M3U ExploitUniversal buffer overflow/DEP bypass Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ [email protected] free to tell me your ideas!! : All the Gadgets are from APP's...

PotPlayer 1.5.42509 Beta - Integer Division by Zero Denial of Service

Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: ------- !/usr/bin/python rawinput"Hit Ente...

Telmanik CMS 1.01 Shell Upload

/ Exploit title : telmanik cms v1.01 File Upload Date : 12/12/2013 Author : JoKeRStEx Software Link : http://www.telmanik.com/open-source.php Tested On : WinXP PRO SP3 CVE : Version : 1.01 / 1 File Upload P.O.C "@".$shell; curlsetopt$dz,CURLOPTPOSTFIELDS,$jxarray; $exec=curlexec$dz;...

Beetel Connection Manager 'NetConfig.ini'文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 63414 Beetel Connection Manager是一套3G无线上网卡的连接管理器。 Beetel Connection Manager验证 NetConfig.ini 文件不正确时可触发缓冲区溢出，这可使上下文独立的攻击者造成应用崩溃，停止响应，也可能执行任意代码。 0 beetel Beetel Connection Manager PCWBTLINDV1.0.0B04 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Castripper 2.50.70 - (.pls) DEP Exploit

Exploit for windows platform in category local exploits Castripper 2.50.70 .pls exploit Stack buffer overflow/DEP bypass Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ email protected All ROP gadgets are from the APP's DLLs except for th...