CVE-2010-1250

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...

Easy CD-DA Recorder 2007 Buffer Overflow

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

VUPlayer 2.49 .M3U Universal Buffer Overflow With DEP Bypass

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

Audio Converter 8.1 - Local Stack Buffer Overflow

Audio Converter 8.1 - Local Stack Buffer Overflow Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit Date : 16/05/2010 Author : Sud0 Bug found by : chap0 Software Link : http://download.cnet.com/Audio-Converter/3000-21404-10045287.html Version : 8.1 OS : Windows Tested on ...

Audio Converter 8.1 - Local Stack Buffer Overflow ROP/WPM

Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit ROP/WPM Date : 07/06/2010 Author : Sud0 Bug found by : chap0 Software Link : http://download.cnet.com/Audio-Converter/3000-21404-10045287.html Version : 8.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Easy CD-DA Recorder 2007 - Local Buffer Overflow SEH Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type o...

Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit

Exploit for windows platform in category local exploits ========================================================== Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit ========================================================== Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow P...

VUPlayer 2.49 - '.m3u' File Universal Buffer Overflow (DEP Bypass) (1)

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

XFTP 3.0 Build 0239 Long filename Buffer Overflow

Exploit for windows platform in category remote exploits ================================================= XFTP 3.0 Build 0239 Long filename Buffer Overflow ================================================= !/usr/bin/python import socket import sys """...

ZipExplorer 7.0 - '.zar' Denial of Service

!/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download: http://home.online.no/arnholm/org/exe/ZipX70sh.exe Platform: Windows...

IP2location.dll 1.0.0.1 - Function Initialize() Local Buffer Overflow

IP2location.dll 1.0.0.1 - Function Initialize Local Buffer Overflow IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum:...

IP2location.dll 1.0.0.1 Initialize() Buffer Overflow

IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum: bf66e2ef8be3c301b381cfb424ad0afc, v3.0.1.0 Found and coded by sinn3r...

Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC

No description provided by source. / Title: Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC Summary: The Adobe® Photoshop® family of products is the ultimate playground for bringing out the best in your digital images, transforming them into anything you can imagine...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

WinDirectAudio Proof Of Concept

/usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n"; print "\nEvil WAV file create...

Solarwinds TFTP Denial Of Service

Exploit Title: Solarwinds TFTP DOS Date: 5-21-2010 Author: Nullthreat Software Link: http://www.solarwinds.com/products/freetools/freetftpserver.aspx Version: 10.4.0.10 Tested on: Windows XP SP3 Code : !/usr/bin/perl SolarWinds TFTP Server 10.4.0.10 Remote DoS Exploit by Nullthreat The applicatio...

WinDirectAudio (.WAV) PoC

Exploit for windows platform in category dos / poc ========================= WinDirectAudio .WAV PoC ========================= /usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : window...

WinDirectAudio 1.0 - '.wav' (PoC)

/usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n"; print "\nEvil WAV file create...

SolarWinds TFTP Server 10.4.0.10 - Denial of Service

SolarWinds TFTP Server 10.4.0.10 - Denial of Service Exploit Title: Solarwinds TFTP DOS Date: 5-21-2010 Author: Nullthreat Software Link: http://www.solarwinds.com/products/freetools/freetftpserver.aspx Version: 10.4.0.10 Tested on: Windows XP SP3 Code : !/usr/bin/perl SolarWinds TFTP Server...

WinDirectAudio 1.0 - .wav (PoC)

WinDirectAudio 1.0 - .wav PoC /usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n";...