Majoda CMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Majoda CMS Auth Bypass SQL Injection Vulnerability ==================================================== Exploit Title: Majoda CMS Auth Bypass SQL Injection Vulnerability Date: 2010-02-28...

Safari 4.0.4 Stack Overflow Denial Of Service

!/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits with illegal operation: AppName: safari.exe AppVer: 5.31.21.10...

Apple Safari 4.0.4 (531.21.10) - Stack Overflow Denial of Service

Apple Safari 4.0.4 531.21.10 - Stack Overflow Denial of Service !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits wi...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

No description provided by source. !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits with illegal operation: AppName...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

Exploit for unknown platform in category dos / poc =============================================================== Safari 4.0.4 531.21.10 - Stack Overflow/Run Denial of Service =============================================================== !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/r...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer 1.04 - .orb File Local Universal Overflow (SEH)

Orbital Viewer 1.04 - .orb File Local Universal Overflow SEH !/usr/bin/python Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC

Exploit for unknown platform in category dos / poc ================================================ Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC ================================================ Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC Stack overflow on Safari Extra long malforme...

Ollydbg 2.00 Beta 1 Local Buffer Overflow

Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print "" print "" print " SuBz3r0 " print "" pri...

Easy FTP Server 1.7.0.2 Buffer Overflow

Exploit Title: Easy FTP Server 1.7.0.2 Remote BoF Date: 20/02/2010 Author: athleet Software Link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip Version: 1.7.0.2 Tested on: XP SP3 Eng CVE : None Code : Below !/usr/bin/python import socket...

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion (PoC)

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion PoC !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow Tested on: XP SP3 Eng !/usr/bin/python import socket, sys print """ Easy FTP Server 1.7.0.2 Remote BoF Discovered by: athleet jonbutler88atgooglemaildotcom """ if lensys.argv != 3: print "Usage: ./easyftp.py " sys.exit1 target = sys.argv1 port =...

Microsoft Windows Media Player 11.0.5721.5145 - .mpg Buffer Overflow

Microsoft Windows Media Player 11.0.5721.5145 - .mpg Buffer Overflow !/usr/bin/perl Windows Media Player 11.0.5721.5145 .mpg Buffer Overflow Exploit Homepage: www.microsoft.com Exploit Coded by: cr4wl3r From: Indonesia Testing Results: Bug: Integer Division By Zero Platform: Windows XP SP3 ENG...

Article Friendly SQL Injection Vulnerability

No description provided by source. / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow

Tested on: XP SP3 Eng !/usr/bin/python import socket, sys print """ Easy FTP Server 1.7.0.2 Remote BoF Discovered by: athleet jonbutler88atgooglemaildotcom """ if lensys.argv != 3: print "Usage: ./easyftp.py " sys.exit1 target = sys.argv1 port = intsys.argv2 Calc.exe PoC shellcode - Tested on XP...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

No description provided by source. Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID:...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E Member: Scan File:...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...