VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)

!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN ''' sleep3...

Beetel Connection Manager NetConfig.ini Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class Metasploit4 "Beetel Connection Manager NetConfig.ini Buffer Overflow", 'Description' = %q This module exploits a stack-based buffer overflow on...

Messagebox Shellcode (113 bytes) - Any Windows Version

/ User32-free Messagebox Shellcode for any Windows version ======================================================== Title: User32-free Messagebox Shellcode for any Windows version Release date: 16/10/2013 Author: Giuseppe D'Amore http://it.linkedin.com/pub/giuseppe-d-amore/69/37/66b Size: 113 byt...

Any Windows Version - Messagebox Shellcode 113 bytes

Any Windows Version - Messagebox Shellcode 113 bytes. Shellcode exploit for windows platform / User32-free Messagebox Shellcode for any Windows version ======================================================== Title: User32-free Messagebox Shellcode for any Windows version Release date: 16/10/2013...

Windows Gather Prefetch File Information

This module gathers prefetch file information from WinXP, Win2k3 and Win7 systems and current values of related registry keys. From each prefetch file we'll collect filetime converted to utc of the last execution, file path hash, run count, filename and the execution path. This module requires...

Intrasrv 1.0 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Intrasrv 1.0 Buff...

Intrasrv 1.0 Buffer Overflow

This module exploits a boundary condition error in Intrasrv Simple Web Server 1.0. The web interface does not validate the boundaries of an HTTP request string prior to copying the data to an insufficiently sized buffer. Successful exploitation leads to arbitrary remote code execution in the...

Novell Client 2 SP3 Privilege Escalation Exploit

Exploit for windows platform in category local exploits Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not sure weather...

Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation

Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not sure weather there was anything else public Exploit for DEMO purposes...

MiniWeb HTTP Server 300 - Crash (PoC)

MiniWeb HTTP Server 300 - Crash PoC MiniWeb HTTP server build 300, built on Feb 28 2013 by Stanley Huang http://sourceforge.net/projects/miniweb/files/miniweb/0.8/miniweb-win32-20130309.zip/download Heap corruption PoC - remote DoS Tested on Win7 SP1 RUS x dmnt 2013 import socket print 'Mini Web...

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow (SEH)

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow SEH Exploit Title: Adrenalin Player 2.2.5.3 Buffer Overflow ExploitSEH http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Author: seaofglass [email protected] Version : 2.2.5.3 Tested on: WinXP3 KOR, Win7 KOR my $file =...

MiniWeb HTTP Server 300 - Crash (PoC)

MiniWeb HTTP server build 300, built on Feb 28 2013 by Stanley Huang http://sourceforge.net/projects/miniweb/files/miniweb/0.8/miniweb-win32-20130309.zip/download Heap corruption PoC - remote DoS Tested on Win7 SP1 RUS x dmnt 2013 import socket print 'Mini Web HTTP Server remote DoS exploit by...

Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH)

Exploit Title: Adrenalin Player 2.2.5.3 Buffer Overflow ExploitSEH http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Author: seaofglass [email protected] Version : 2.2.5.3 Tested on: WinXP3 KOR, Win7 KOR my $file = "adrenalin.m3u"; my $junk = "\x90" x 2172; my $nseh = pack'V'...

MyBB Games Cross Site Scripting

Exploit Title :Mybb Games xss Vul Author : DarkSnipper ,Dream.Killer & Soulinj3ctor Discovered By : [email protected] Home : http://cybercoders.org Link : http://mods.mybb.com/view/game-section Security Risk : High Version : All Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Nitro Pro 8.0.3.1 - Crash (PoC)

!C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10 characters the app crashes: !exploitable...

Wordpress sem WYSIWYG Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress sem WYSIWYG Arbitrary File Upload Vulnerability Author: fayzoun facebook: https://www.facebook.com/fayzoun.AO Google Dork: inurl:wp-content/plugins/sem-wysiwyg/ Tested on: win7 ================================== Exploi...

Classified Ultra ScriptsGenie Cross Site Scripting / SQL Injection

Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link; http://www.hotscripts.com/listing/classified-ultra-scriptsgenie/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo...

Classified Ultra ScriptsGenie XSS / SQL Injection Vulnerabilities

Classified Ultra ScriptsGenie suffers from cross site scripting and remote SQL injection vulnerabilities. Note that this finding houses site-specific data. Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link;...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

ProjektB CMS SQL Injection

Exploit Title : ProjektB Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://www.IrIsT.Ir/forum Software Link : http://www.projektb.biz/ Security Risk : High Version : All Version Tested on : win7,BT,Ubuntu Dork : intext:"Design by ProjektB" Expl0iTs :...