VideoCharge Express 3.16.3.04 - BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com=20 Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Vanilla 3.16.4.06 - Local Buffer Overflow

VideoCharge Vanilla 3.16.4.06 - Local Buffer Overflow !/usr/bin/python Exploit Title: VideoCharge v3.16.4.06 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 3.16.4.06 Tested on: Win XP3 Software link:...

i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

VideoCharge Express 3.16.3.04 - Local Buffer Overflow

!/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Professional + Express Vanilla 3.18.4.04 - Local Buffer Overflow

!/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.18.4.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: v3.18.4.04 Tested on: Win XP3 Software...

VideoCharge Vanilla 3.16.4.06 - Local Buffer Overflow

!/usr/bin/python Exploit Title: VideoCharge v3.16.4.06 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 3.16.4.06 Tested on: Win XP3 Software link: http://www.softpedia.com/dyn-postdownload.php/36f0ea5a24f3=...

Mediacoder 0.8.34.5716 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.8.34.5716 - .m3u Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Mediacoder 0.8.34.5716 Buffer Overflow SEH Exploit .m3u Date: 05/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 0.8.34.5716 Tested on: Win X...

Mediacoder 0.8.34.5716 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Mediacoder 0.8.34.5716 Buffer Overflow SEH Exploit .m3u Date: 05/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 0.8.34.5716 Tested on: Win XP3 Vendor: http://www.mediacoderhq.com/ Software link:...

Mediacoder 0.8.34.5716 Buffer Overflow

!/usr/bin/python Exploit Title: Mediacoder 0.8.34.5716 Buffer Overflow SEH Exploit .m3u Date: 05/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 0.8.34.5716 Tested on: Win XP3 Vendor: http://www.mediacoderhq.com/ Software link:...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the virtio-win-1.6.5 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

VideoSpirit Pro 1.91 Buffer Overflow

!/usr/bin/python Exploit Title: VideoSpirit Pro v1.91 Date: 27/April/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: [email protected] Version: 1.91 Tested on: Win XP3 and Win 7 Vendor: http://www.verytools.com/ Software link:...

Free MP3 CD Ripper 2.6 2.8 - '.wav' File Buffer Overflow (SEH)

!/usr/bin/env perl original p0c https://www.exploit-db.com/exploits/36465/ credit to TUNISIAN CYBER however he was attemping to vanilla buffer overflow in fact it is SEH based exploit using the address 0x7C9D30D7 is limit the targets which I assume belongs to OS file didn't work on win7 yes he di...

Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service (MS15-034)

Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service MS15-034 Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload...

Microsoft Windows - 'HTTP.sys' HTTP Request Parsing Denial of Service (MS15-034)

Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload s.recv1024 s.close Make sure iisstart.htm exist. Init = "GET /iisstart.htm...

Moderate: Red Hat Security Advisory: hivex security, bug fix, and enhancement update

Updated hivex packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (PoC)

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version:...

Siemens ICS Switches Hit With Buffer Overflow, Authentication Bugs

There are a number of serious vulnerabilities in the Siemens Ruggedcom WIN switches, including a remotely exploitable buffer overflow and a flaw that could allow an attacker to take actions on the device without authentication. The vulnerabilities affect several models of the Ruggedcom WIN...

CVE-2015-1449

CVE-2015-1449 affects Siemens Ruggedcom WIN51xx/WIN52xx/WIN70xx/WIN72xx, where the integrated web server is vulnerable to a stack-based buffer overflow that can allow remote code execution. The vulnerable firmware lines are before SS4.4.4624.35 for WIN51xx/WIN52xx and before BS4.4.4621.32 for WIN...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC)

Lorex LH300 Series - ActiveX Buffer Overflow PoC Disclosure: 09/01/2014 / Last updated: 18/01/2015 Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC)

Disclosure: 09/01/2014 / Last updated: 18/01/2015 Hi, I have discovered a buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that ...