CVE-2010-2743

The CVE-2010-2743 issue affects Windows XP SP3 kernel-mode components, specifically the Win32k NtUserLoadKeyboardLayoutEx path, where indexing of a function-pointer table during loading of keyboard layouts from disk allows a local user to escalate privileges. The underlying cause is improper hand...

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...

ALZip 8.12.0.3 Buffer Overflow (SEH)

Exploit for windows platform in category local exploits +Exploit Title: Exploit Buffer Overflow AlZipSEH +Date: 01\19\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.altools.com/al/downloads/alzip/ALZip812.exe +Version: 8.12.0.3 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A...

Novell iPrint 5.52 - ActiveX 'GetDriverSettings()' Command Execution

// Calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys <= 2011.1.13.89 Local Kernel Mode D.O.S Exploit(3 lines of code)

Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys = 2011.1.13.89 Local Kernel Mode D.O.S Exploit Date: 2011-1-16 Author: MJ0011 Version: KingSoft AntiVirus 2011 SP5.2 with KisKrnl.sys =2011.1.13.89 Tested on: Windows XP SP3 DETAILS: KisKrnl.sys hook the kernel function KiFastCallEntry , but is not...

N-13 News 3.4 Remote Admin Add CSRF Exploit

Exploit for php platform in category web applications Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; hack-book.com // GlaDiatOr ; Coffin Of Evil ;The Sword; Cyber-Err0r ; R3d-D3v1L special...

A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: email protected...

Novell iPrint 5.52 ActiveX GetDriverSettings() Exploit

// Calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: h1ch4m@live....

N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)

N-13 News 3.4 - Cross-Site Request Forgery Admin Add ======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email :...

A-PDF All To MP3 Converter 2.0.0 Buffer Overflow

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: [email protected] Home: http://Net-Effects.blogspot.com triggering details:...

Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys <= 2011.1.13.89 Local Kernel Dos

Exploit for windows platform in category dos / poc Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys = 2011.1.13.89 Local Kernel Mode D.O.S Exploit Date: 2011-1-16 Author: MJ0011 Software Link: http://cd001.www.duba.net/duba/install/2011/once/KAV110114DOWN913.exe Version: KingSoft AntiVirus 2011 SP5.2 wi...

ActiveX UserManager 2.03 Buffer Overflow

Exploit for windows platform in category dos / poc ' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html ' Version: 2.03 ' Tested on: Windows XP SP3 / IE7 in VirtualBox '...

Mini-Stream RM-MP3 Converter Buffer Overflow

Title : Mini-stream RM-MP3 Converter Buffer Overflow Exploit Author : ZoRLu Proof : http://img843.imageshack.us/img843/3144/buffer.jpg Desc. : usr: zrl , pass: 123456 , localgroup: Administrator Tested : xp/sp3 mail-msn : [email protected] Home : http://z0rlu.blogspot.com Date : 04/01/20...

ActiveX UserManager 2.03 - Buffer Overflow

' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html ' Version: 2.03 ' Tested on: Windows XP SP3 / IE7 in VirtualBox ' Overwrites SEH with 00410041 but I could not find a useab...

ActiveX UserManager 2.03 - Buffer Overflow

ActiveX UserManager 2.03 - Buffer Overflow ' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html ' Version: 2.03 ' Tested on: Windows XP SP3 / IE7 in VirtualBox ' Overwrites SEH...

eXtremeMP3 Player - Local Buffer Overflow (SEH)

eXtremeMP3 Player - Local Buffer Overflow SEH +Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S...

eXtremeMP3 Player Buffer Overflow

+Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S WWW.INVASAO.COM.BR [email protected] / Note: To...

eXtremeMP3 Player - Local Buffer Overflow (SEH)

+Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S WWW.INVASAO.COM.BR [email protected] / Note: To...

Blackmoon FTP 3.1 Build 1735,1736 DOS

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: BlackmoonFTP Server DOS Author: Craig Freyman cd1zz Software Link: http://www.mediafire.com/?bnc4d00myymmx55 Version: 3.1 Release 6 - Build 1735 and 1736 Tested On: Windows XP SP3 Vendor Contacted: 12/28/2010 Vendo...