Microsoft Windows Kernel - Use-After-Free with Cursor Object (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=457 --- The attached testcase crashes Win 7 with Special Pool enabled while accessing the freed global cursor object gpqCursor. See poc.cpp for instructions on how to compile and run. Proof of Concept:...

Microsoft Windows Kernel - FlashWindowEx​ Memory Corruption (MS15-097)

Microsoft Windows Kernel - FlashWindowEx​ Memory Corruption MS15-097 Source: https://code.google.com/p/google-security-research/issues/detail?id=475 --- The attached PoC triggers a wild write on Win 7 32-bit with Special Pool enabled on win32k.sys. --- Proof of Concept:...

Microsoft Windows Kernel - 'bGetRealizedBrush' Use-After-Free (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=458 --- The attached testcase crashes Win 7 with Special Pool on win32k while accessing freed memory in bGetRealizedBrush. --- Proof of Concept:...

Microsoft Windows Kernel - 'FlashWindowEx​' Memory Corruption (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=475 --- The attached PoC triggers a wild write on Win 7 32-bit with Special Pool enabled on win32k.sys. --- Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38276.zip...

WordPress GeoPlaces3 Theme - Arbitrary File Upload Vulnerbility

Exploit for php platform in category web applications Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme...

Pdf Shaper Buffer Overflow

This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank definition: http://dev.metabuffer.com/redmine/projects/framework/wiki/ExploitRanking...

ChiefPDF Software 2.0 - Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:ChiefPDF Software Buffer Overflow vulnerable programs: PDF to Image Converter 2.0 PDF to Image Converter Free 2.0 PDF to Tiff Converter 2.0 PDF to Tiff Converter Free 2.0 Software...

ChiefPDF Buffer Overflow

!/usr/bin/python Exploit Title:ChiefPDF Software Buffer Overflow vulnerable programs: PDF to Image Converter 2.0 PDF to Image Converter Free 2.0 PDF to Tiff Converter 2.0 PDF to Tiff Converter Free 2.0 Software Link:http://www.soft32.com/publishers/chiefpdf/ Author: metacom - twitter.com/m3tac0m...

Multiple ChiefPDF Software 2.0 - Local Buffer Overflow

Multiple ChiefPDF Software 2.0 - Local Buffer Overflow !/usr/bin/python Exploit Title:ChiefPDF Software Buffer Overflow vulnerable programs: PDF to Image Converter 2.0 PDF to Image Converter Free 2.0 PDF to Tiff Converter 2.0 PDF to Tiff Converter Free 2.0 Software...

Multiple ChiefPDF Software 2.0 - Local Buffer Overflow

!/usr/bin/python Exploit Title:ChiefPDF Software Buffer Overflow vulnerable programs: PDF to Image Converter 2.0 PDF to Image Converter Free 2.0 PDF to Tiff Converter 2.0 PDF to Tiff Converter Free 2.0 Software Link:http://www.soft32.com/publishers/chiefpdf/ Author: metacom - twitter.com/m3tac0m...

Adobe Flash AS2 - textfield.filters Use-After-Free (2)

Adobe Flash AS2 - textfield.filters Use-After-Free 2 Source: https://code.google.com/p/google-security-research/issues/detail?id=342&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for https://code.google.com/p/chromium/issues/detail?id=480496 Credit is to bilou,...

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Source: https://code.google.com/p/google-security-research/issues/detail?id=326&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=475018 Credit is to bilou, working with the Chromium Vulnerability Rewards...

Flash - Uninitialized Stack Variable MPD Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=316&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=472201 Credit is to bilou, working with the Chromium Vulnerability Rewards...

PDF Shaper 3.5 - Local Buffer Overflow (Metasploit)

PDF Shaper 3.5 - Local Buffer Overflow Metasploit This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 'PDF Shaper Buffer Overflow', 'Description' = %q PDF Shaper is prone to a security...

PDF Shaper Buffer Overflow Exploit

PDF Shaper 3.5 is prone to a security vulnerability when processing PDF files. The vulnerability appear when we use Convert PDF to Image and use a specially crafted PDF file. This Metasploit module has been tested successfully on Win Xp, Win 7, Win 8, Win 10. This module requires Metabuffer:...

PDF Shaper 3.5 - Local Buffer Overflow (Metasploit)

This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 'PDF Shaper Buffer Overflow', 'Description' = %q PDF Shaper is prone to a security vulnerability when processing PDF files. The...

PDF Shaper Buffer Overflow

This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 'PDF Shaper Buffer Overflow', 'Description' = %q PDF Shaper is prone to a security vulnerability when processing PDF files. The...

Netsparker 2.3.X - Remote Code Execution Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Title : Netsparker 2.3.X - Remote Code Execution Tested on Netsparker 2.3.x / Win 7 Author : Hesam Bazvand E-Mail : email protected FaceBook : https://www.facebook.com/hesam.king73 Twitter : https://twitter.com/hesamking73...

Acunetix Web Vulnerability Scanner 9.5 - Crash PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Title : Acunetix Web Vulnerability Scanner 9.5 - Crash Proof Of Concept Website : https://www.acunetix.com Tested : win 7 / win 8.1 / win vista Author : Hadi Zomorodi Monavar Email : email protected 1 . run python code : pyth...

Netsparker 2.3.x - Remote Code Execution

Netsparker 2.3.x - Remote Code Execution !/usr/bin/python Title : Netsparker 2.3.X - Remote Code Execution Tested on Netsparker 2.3.x / Win 7 Author : Hesam Bazvand E-Mail : [email protected] FaceBook : https://www.facebook.com/hesam.king73 Twitter : https://twitter.com/hesamking73 Exploit...