Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

!/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 17/04/2010 Tested on WinXPSP2/SP3 englis...

Rumba ftp Client 4.2 PASV BoF (SEH)

No description provided by source. Email: darkernetatgmail.com Tested on: Windows XP SP3 SEH overwrite occurs when sending the directory listing to the client with an overly long filename extension.Note version 4.2.3 might also suffer from this. Usage: ./rumbaftpexploit Code: !/usr/bin/perl use...

Serenity Audio Player 3.2.3 - .m3u Remote Buffer Overflow (Metasploit)

Serenity Audio Player 3.2.3 - .m3u Remote Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/39768/info Serenity Audio Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue...

Serenity Audio Player 3.2.3 - '.m3u' Remote Buffer Overflow (Metasploit)

source: https://www.securityfocus.com/bid/39768/info Serenity Audio Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Rumba FTP Client 4.2 - PASV Buffer Overflow (SEH)

Rumba FTP Client 4.2 - PASV Buffer Overflow SEH Email: darkernetatgmail.com Tested on: Windows XP SP3 SEH overwrite occurs when sending the directory listing to the client with an overly long filename extension.Note version 4.2.3 might also suffer from this. Usage: ./rumbaftpexploit Code:...

Easyzip 2000 v3.5 (.zip) 0day stack buffer overflow PoC exploit

Exploit for windows platform in category local exploits =============================================================== Easyzip 2000 v3.5 .zip 0day stack buffer overflow PoC exploit =============================================================== ?php / Easyzip 2000 v3.5 .zip 0day stack buffer...

WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WM Downloader...

Rumba FTP Client 4.2 - PASV Buffer Overflow (SEH)

Email: darkernetatgmail.com Tested on: Windows XP SP3 SEH overwrite occurs when sending the directory listing to the client with an overly long filename extension.Note version 4.2.3 might also suffer from this. Usage: ./rumbaftpexploit Code: !/usr/bin/perl use warnings; use strict; use IO::Socket...

WM Downloader v3.0.0.9 Buffer Overflow (Meta)

Exploit for windows platform in category local exploits ============================================= WM Downloader v3.0.0.9 Buffer Overflow Meta ============================================= This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit)

WM Downloader 3.0.0.9 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Windows win32k.sys驱动SfnINSTRING本地内核拒绝服务漏洞

BUGTRAQ ID: 39631 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所使用的Win32k.sys驱动在DispatchMessage时，会最后调用到xxxDefWindowProc。这个函数在处理某些消息时，会调用gapfnScSendMessage这个函数表中的函数来处理。2000/XP/2003下在处理0x18d号消息时，会有一个名为SfnINSTRING的函数，当lParam不为空时该函数直接认为lParam是内存指针，并直接从地址中取出数据。尽管函数内使用了SEH，但是只要传递错误的内核地址，仍然会引发系统崩溃。...

ZipWrangler 1.20 (.zip) SEH 0day exploit

Exploit for windows platform in category local exploits ======================================== ZipWrangler 1.20 .zip SEH 0day exploit ======================================== !/usr/bin/perl Title: ZipWrangler 1.20 .zip SEH 0day exploit Author: TecR0c & Sud0 Date: April 24th, 2010 Corelan...

Xftp client 3.0 - 'PWD' Remote Overflow

Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link: http://www.netsarang.com/download/downxft3.html Version: Xftp 3.0 build 0238 Tested on: Windows XP SP3 Usage: ./xftpexploit The BOF occurs when sending an overly long PWD response. EDB Testing Notes...

Xftp client 3.0 PWD Remote Exploit

Exploit for windows platform in category remote exploits ================================== Xftp client 3.0 PWD Remote Exploit ================================== Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link:...

ZipGenius 6.3.1.2552 - 'zgtips.dll' Local Stack Buffer Overflow

Exploit Title : ZipGenius zgtips.dll Stack Buffer Overflow Corelan : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-029 Date : April 21st, 2010 Author : corelanc0d3r, mrme and rick2600 Bug found by : rick2600 Software Link : http://www.zipgenius.com/ Version : v6.3.1.2552 OS : Windows...

ZipGenius 6.3.1.2552 - zgtips.dll Local Stack Buffer Overflow

ZipGenius 6.3.1.2552 - zgtips.dll Local Stack Buffer Overflow Exploit Title : ZipGenius zgtips.dll Stack Buffer Overflow Corelan : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-029 Date : April 21st, 2010 Author : corelanc0d3r, mrme and rick2600 Bug found by : rick2600 Software Link :...

Speed Commander 13.10 (.zip) Memory Corruption

No description provided by source. !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.sp-download.de/sc13/sc13.exe Platform: Windows XP sp3 En Advisory:...

ZipGenius zgtips.dll Stack Buffer Overflow

Exploit for windows platform in category local exploits ========================================== ZipGenius zgtips.dll Stack Buffer Overflow ========================================== Exploit Title : ZipGenius zgtips.dll Stack Buffer Overflow Corelan :...

MultiThreaded HTTP Server v1.1 Directory Traversal

Exploit for multiple platform in category remote exploits ================================================== MultiThreaded HTTP Server v1.1 Directory Traversal ================================================== Exploit Title: MultiThreaded HTTP Server v1.1 Directory Traversal Date: Apr 21, 2010...

HP Operations Manager <= v8.16 - (srcvw4.dll) Unicode Stack Overflow

Exploit for windows platform in category dos / poc ===================================================================================================== HP Operations Manager !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | |...