MediaCoder .M3U Buffer Overflow

This module exploits a buffer overflow in MediaCoder 0.8.22. The vulnerability occurs when adding an .m3u, allowing arbitrary code execution under the context of the user. DEP bypass via ROP is supported on Windows 7, since the MediaCoder runs with DEP. This module has been tested successfully on...

Sami FTP Server 2.0.1 RETR Denial Of Service

Sami FTP server version 2.0.1 RETR denial of service exploit. !/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This Metasploit module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space. The corruption occurs while handling ioctl requests with code 0x1438BB, where a 0x00000009 dword is written to an arbitrary address. An entry within the HalDispatchTable is overwritten in order to...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Sami FTP Server 2.0.1 RETR Denial Of Service

!/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP SP3 Description: A bug discovered in Sami FTP Server allows an...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space. The corruption occurs while handling ioctl requests with code 0x1438BB, where a 0x00000009 dword is written to an arbitrary address. An entry within the HalDispatchTable is overwritten in order to execute...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

MusicBee 2.0.4663 - .m3u Denial of Service

MusicBee 2.0.4663 - .m3u Denial of Service !/usr/bin/perl Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit Date: 2013/6/19 Exploit Author: Chako Vendor Homepage: http://getmusicbee.com/ Version: v2.0.4663 Tested on: Windows XP SP3 English $HEADER = "http://"; $BOF = "\x41" x 3740;...

MusicBee 2.0.4663 Denial Of Service

!/usr/bin/perl Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit Date: 2013/6/19 Exploit Author: Chako Vendor Homepage: http://getmusicbee.com/ Version: v2.0.4663 Tested on: Windows XP SP3 English $HEADER = "http://"; $BOF = "\x41" x 3740; $BOF = "\x41" x 5000; openmyfile, ' MusicB...

Syslog Server 1.2.3 - Crash (PoC)

Syslog Server 1.2.3 - Crash PoC !/usr/bin/python Exploit Title: Syslog Server 1.2.3 Date: 12th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Vendor Homepage: http://sourceforge.net/users/ghuysmans Software Link:...

WinRadius 2.11 - Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/...

WinRadius 2.11 Denial Of Service

!/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/ Vendor Homepage: ADVERT HOLDING PAGE...

WinRadius 2.11 - Denial of Service

!/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/ Vendor Homepage: ADVERT HOLDING PAGE...

Sami FTP Server 2.0.1 - RETR Denial of Service

!/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP SP3 Description: A bug discovered in Sami FTP Server allows an...

Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Internet Explorer - textNode Use-After-Free (MS13-037) (Metasploit)

Microsoft Internet Explorer - textNode Use-After-Free MS13-037 Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS13-037 Microsoft Internet Explorer textNode Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-037 Microsof...

Quick TFTP Server Pro 2.2 - Denial of Service

Quick TFTP Server Pro 2.2 - Denial of Service !/usr/bin/python Exploit Title: Quick TFTP Server 2.2 DoS Date: 6th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up:...

Novell Client for Windows 'nicm.sys' 本地权限提升漏洞

BUGTRAQ ID: 60203 Novell Client 工作站软件通过提供对 NetWare 和 Open Enterprise Server OES 的访问，扩展了 Linux 和 Windows 台式机的功能。 Novell Client 2 SP3 for Windows 7/8在处理NICM.SYS内的"NICMIOCTLREQUESTREPLY" 0x143B6B IOCTL请求时存在错误，可导致以内核权限执行任意代码。 0 Novell Client for Windows NT/2000/XP 4.x 厂商补丁： Novell ------...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...