CVE-2016-0165

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka “Win32k Elevation of Privilege...

Microsoft XML Core Services CVE-2016-0147 Remote Code Execution Vulnerability

Description Microsoft XML Core Services is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10...

Microsoft Windows Graphics Component CVE-2016-0145 Memory Corruption Vulnerability

Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft .NET Framework 3.0 SP2...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 Path Traversal / Code Execution

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Exploit for windows platform in category local exploits + Credits: hyp3rlinx Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE Reference: ============== N/A Vulnerability Details:...

CAM UnZip 5.1 - .ZIP File Directory Traversal

CAM UnZip 5.1 - .ZIP File Directory Traversal + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type:...

JPEGSnoop 1.7.3 DLL Hijacking

Software : JPEGSnoop Software Link: https://sourceforge.net/projects/jpegsnoop/ Version: LPORT=4444 JPEGSnoopENU.dll Exploit: Place a dummy or original JPEG file having .jpeg extension file with the malicious dll. When the file is opened in JPEGSnoop you can get machines access and even the shell...

Express Zip 2.40 - Directory Traversal

Express Zip 2.40 - Directory Traversal !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link: http://www.nchsoftware.com/zip/zipplus.exe Vulnerable...

Express Zip 2.40 - Directory Traversal

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link:...

Immunity Canvas: JENKINS_JRMP_DESERIALIZATION

Name| jenkinsjrmpdeserialization ---|--- CVE| CVE-2016-0788 Exploit Pack| CANVAS Description| jenkinsjrmpdeserialization Notes| CVE Name: CVE-2016-0788 VENDOR: Jenkins NOTES: Versions tested: Ubuntu Linux 14.04.3 Jenkins 1.598 - 6 / 7 / 8 Jenkins 1.649 - 7 / 8 Windows 7 Ultimate SP1 Jenkins 1.598...

CVE-2 0 1 6-0 6 3 6 vulnerability analysis-vulnerability warning-the black bar safety net

0x00 vulnerability profile Vulnerability number: CVE-2 0 1 6-0 6 3 6, this vulnerability is a security researcher Adam Gowdiak in 2 0 1 3 report to the Oracle of the vulnerability, CVE-2 0 1 3-5 8 3 8 the variants. Due to the Oracle on the part of the code in the branch not for the vulnerability ...

Cogent Datahub 7.3.9 Gamma Script - Elevation of Privilege

Exploit for windows platform in category local exploits / Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryS...

Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation

Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation / Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS SERVICENAME...

Cogent Datahub 7.3.9 Privilege Escalation

/ Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS S...

Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation

/ Exploit Title: Cogent Datahub sc qc "Cogent DataHub" SC QueryServiceConfig SUCCESS SERVICENAME: Cogent DataHub TYPE : 110 WIN32OWNPR...

Internet Download Manager 6.25 Build 14 - 'Find file' Unicode SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Internet Download Manager 6.25 Build 14 - 'Find file' SEH Buffer Overflow Unicode Date: 20-3-2016 Exploit Author: Rakan Alotaibi Contact: https://twitter.com/hxteam Software Link:...

MS16-032 Secondary Logon Handle Privilege Escalation

This module exploits the lack of sanitization of standard handles in Windows' Secondary Logon Service. The vulnerability is known to affect versions of Windows 7-10 and 2k8-2k12 32 and 64 bit. This module will only work against those versions of Windows with Powershell 2.0 or later and systems wi...

Internet Download Manager 6.25 Build 14 - 'Find file' Unicode (SEH)

!/usr/bin/python Exploit Title: Internet Download Manager 6.25 Build 14 - 'Find file' SEH Buffer Overflow Unicode Date: 20-3-2016 Exploit Author: Rakan Alotaibi Contact: https://twitter.com/hxteam Software Link: http://mirror2.internetdownloadmanager.com/idman625build14.exe Tested on: Windows 7 S...

Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow

Netwrix Auditor 7.1.322.0 ActiveX sourceFile Stack Buffer Overflow Vulnerability Vendor: Netwrix Corporation Product web page: http://www.netwrix.com Affected version: 7.1 Build 322 Summary: Netwrix Auditor is an IT audit software that maximizes visibility of IT infrastructure changes and data...