5265 matches found
ScriptFTP 3.3 - Remote Buffer Overflow (MSF)
No description provided by source. Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 Msf::Exploit::Remo...
Wireshark 1.10.7 - DoS PoC
No description provided by source. !/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissaatgmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepage:...
ImgSvr <= 0.6.5 (long http post) Denial of Service Exploit
No description provided by source. !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product...
MW6 Technologies DataMatrix ActiveX (Data param) - Buffer Overflow
No description provided by source. !-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow PROBABLY leading to arbitrary code execution. COM Object - DE7DA0B5-7D7B-4CEA-8739-65CF600D511E MW6DataMatrix Class File...
IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...
Internet Explorer 8, 9 & 10 - CInput Use-After-Free (MS14-035) - Crash PoC
No description provided by source. !-- Exploit Title: MS14-035 Internet Explorer CInput Use-after-free POC Product: Internet Explorer Vulnerable version: 8,9,10 Date: 23.06.2014 Exploit Author: Drozdova Liudmila, ITDefensor Vulnerability Research Team http://itdefensor.ru/ Vendor Homepage:...
LEADTOOLS 11.5.0.9 - (ltlst11n.ocx) Insert() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110100-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltlst11n.ocx prototype = Function Insert ByVal Bitmap As Long , ByVal pszText As Stri...
Microsoft Office OneNote 2010 Crash PoC
No description provided by source. Title : Microsoft Office OneNote 2010 WriteAV Vulnerability Version : Microsoft Office professional Plus 2010 Date : 2012-11-19 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG...
SafeNet SoftRemote GROUPNAME Buffer Overflow
No description provided by source. $Id: safenetsoftremotegroupname.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...
Audacious Player 3.4.2/3.4.1 - (.mp3) Crash PoC
No description provided by source. Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1:...
Yahoo! Messenger 5.6 File Transfer Buffer Overrun Vulnerability
No description provided by source. source: Yahoo! Messenger File Transfer Buffer Overrun Vulnerability Yahoo! Messenger is prone to a remotely exploitable buffer overrun vulnerability. An attacker may trigger this condition by initiating a malformed 'sendfile' request, which the victim user must...
Winzip 15.0 WZFLDVW.OCX Text Property Denial of Service
No description provided by source. Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter :...
Compaq Client Management Agents 3.70/4.0,Insight Management Agents 4.21 A/4.22 A/4.30 A,Intelligent Cluster Administrator 1.0,Management Agents for Workstations 4.20 A,Server Management Agents <= 4.23,Survey Utility 2.0 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/282/info A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4....
PEStudio 3.69 - Denial of Service
No description provided by source. Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Window...
LEADTOOLS 11.5.0.9 - (ltdlg11n.ocx) Bitmap Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110060-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltdlg11n.ocx prototype = Property Let Bitmap As Long memberName = Bitmap progid =...
VLC Media Player 1.1.11 - (.amr) Denial of Service PoC
No description provided by source. !/usr/bin/perl Exploit Title: VLC media player v1.1.11 .amr Local Crash PoC Date: 04.01.2012 Author: Fabi@habsec [email protected] Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe Version: 1.1.11 Tested on: Windows 7 x86...
True North Software Internet Anywhere Mail Server 3.1.3 RETR DoS
No description provided by source. source: http://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson error message will appear reporting an access...
TransSoft Broker FTP Server 3.0/4.0/4.7/5.x CWD Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, crea...
LEADTOOLS 11.5.0.9 (ltdlg11n.ocx) - GetColorRes() Access Violation DoS
No description provided by source. html Test Exploit Page object classid='clsid:00110060-B1BA-11CE-ABC6-F5B2E79D9E3F' id='target' //object script language='vbscript' targetFile = C:\Program Files\Rational\common\ltdlg11n.ocx prototype = Function GetColorRes ByVal hWnd As Long As Integer memberNam...
Microsoft Organization Chart 2 - Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...