Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow

This module exploits a vulnerability found in Lattice Semiconductor PAC-Designer 6.21. As a .pac file, when supplying a long string of data to the 'value' field under the 'SymbolicSchematicData' tag, it is possible to cause a memory corruption on the stack, which results in arbitrary code executi...

Multimedia Builder 4.9.8 Denial Of Service

Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady Mohamed Email : [email protected] Website...

MultiMedia Builder 4.9.8 - '.mef' Denial of Service

Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady Mohamed Email : [email protected] Website...

Apple QuickTime TeXML Style Element Stack Buffer Overflow

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...

MultiMedia Builder 4.9.8 - .mef Denial of Service

MultiMedia Builder 4.9.8 - .mef Denial of Service Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady...

Multimedia Builder 4.9.8 Malicious mef Crash

Exploit for windows platform in category dos / poc Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady...

AnvSoft Any Video Conveter 4.3.6 Unicode Buffer Overflow

Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits: Vulnerability Research Laboratory Team...

AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow

Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits: Vulnerability Research Laboratory Team...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 Tested on: Win XP SP3 French trigger the bug : generate the .reg file, execute it, and then open the a...

VLC Media Player MMS流栈缓冲区溢出漏洞

BUGTRAQ ID: 53391 CVE ID: CVE-2012-1775 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player 2.0.1之前版本在实现上存在栈缓冲区溢出漏洞，通过特制的 MMS:// 流允许远程攻击者执行任意代码。 0 VideoLAN VLC Media Player 2.x 厂商补丁： VideoLAN -------- VideoLAN已经为此发布了一个安全公告（VideoLAN-SA-1201）以及相应补丁: VideoLAN-SA-1201：Stack...

Higher Turnover Web Design SQL injection Vulnerability

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|-----------------------------------------------------------| -/ + Exploit Title : Higher Turnover Web...

AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow

AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by...

AnvSoft Any Video Converter 4.3.6 Stack Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by...

Microsoft Windows XP Win32k.sys Denial Of Service

//////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable: Windows xp sp3full patch //...

Microsoft Windows XP - 'win32k.sys' Local Kernel Denial of Service

//////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable: Windows xp sp3full patch //...

Microsoft Windows XP - win32k.sys Local Kernel Denial of Service

Microsoft Windows XP - win32k.sys Local Kernel Denial of Service //////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com //...

SAMSUNG NET-i Viewer 1.37 SEH Overwrite

Exploit for windows platform in category local exploits ' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running o...

SAMSUNG NET-i Viewer 1.37 - Overwrite (SEH)

SAMSUNG NET-i Viewer 1.37 - Overwrite SEH ' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running on Virtualbox '...

Remote Anything Player 5.60.15 Denial Of Service

!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...

Remote-Anything Player 5.60.15 - Denial of Service

!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...