Corel VideoStudio Pro X3 - '.mp4' Buffer Overflow

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

SumatraPDF 1.1 - Denial of Service (PoC)

SumatraPDF 1.1 - Denial of Service PoC Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Acces...

SumatraPDF 1.1 - Denial of Service (PoC)

Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Access Violation when writing to memory...

HP OpenView Network Node Manager ovwebsnmpsrv.exe Unrecognized Option Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By specifying a long 'arg' parameter when executing the 'jovgraph.exe' CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. The vulnerable code is withi...

Winamp v5.571 malicious AVI file handling DoS Vulnerability

No description provided by source. Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print...

DM Database Server Memory Corruption

DM Database Server Memory Corruption Vulnerability Vulnerable: All Version Vendor: www.dameng.com Discovered by: Shennan Wang HuaweiSymantec SRT Details: ========= A vulnerability in DM Database Server all version allows attacker to execute arbitrary code or cause a DoS Denial of...

Disable Third Party Browser Extensions

The Advanced tab contains settings that apply to all of the security zones. We recommend that you disable the Enable third-party browser extensions option. This option includes toolbars and Browser Helper Objects BHOs. While some add-ons can be useful, they also have the ability to violate your...

Firefox 3.6.3 & Safari 4.0.5 - Access Violation Exception and Unknown Exception

No description provided by source. !-- By: Fredrik Nordberg Almroth URL: http://h.ackack.net/ -- script var...

Firefox 3.6.3 & Safari 4.0.5 Access Violation / Unknown Exception

Exploit for windows platform in category dos / poc var...

Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception

Mozilla Firefox 3.6.3 Safari 4.0.5 - Access Violation Exception and Unknown Exception var...

Mozilla Firefox 3.6.3 / Safari 4.0.5 - Access Violation Exception and Unknown Exception

var a=String.fromCharCode60,115,99,114,105,112,116,62,118,97,114,32,97,61,34,60,109,97,114,113,117,101,101,62,97,34,59,119,104,105,108,101,40,49,41,123,97,61,97,43,97,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,97,41,59,125,60,47,115,99,114,105,112,116,62; while1 a=a+a;...

Ransomware Tactic Lures Via Copyright Scare

An ongoing ransomware campaign is pretending to be the fake ICPP Foundation icpp-online.com, where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400...

IncrediMail 2.0 ActiveX (Authenticate) bof PoC

Exploit for windows platform in category dos / poc ============================================== IncrediMail 2.0 ActiveX Authenticate bof PoC ============================================== IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor...

IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)

IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor url:http://www.incredimail.com/english/splash.aspx Tested on windows XP SP3 1-03-2010 Debugging info -------------- Exception Code: ACCESSVIOLATION Disasm: 678914AE MOV EDX,ECX ImSpoolU.dll Seh Chain:...

DAFFTIN Password Keeper 1.0.0.15 POC

Exploit for windows platform in category dos / poc Exploit Title: DAFFTIN Password Keeper 1.0.0.15 Date: 01/04/2010 Author: Richard leahy Software Link: http://www.soft32.com/download222389.html Version: 1.0.0.15 Platform Tested on: Windows Xp Sp3 & Sp2 code !/usr/bin/env ruby test = "A" 800000...

Update Protection against Safari JavaScript 'eval' Remote Denial of Service Exploit

A vulnerability was reported in Safari 3.2.3, specifically in the WebKit.dll" module which is part of the WebKit layout engine. Safari is reported to crash when interpreting a webpage that calls the "eval" JavaScript function with "A/" repeating 21526 times 43052 bytes. When triggering this...

CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer...

Opera 10.50 - integer Overflow

Opera 10.50 - integer Overflow ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Auto...

Opera <= 10.50 integer Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ============================================== Opera = 10.50 integer Buffer Overflow Exploit ============================================== ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Opera 10.10 - 10.50...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...