HandyPassword 4.9.3 - SEH Over-Write Exploit

Exploit for windows platform in category local exploits ''' Exploit Title: HandyPassword SEH-Over Write Exploit Date: 9/24/2015 Exploit Author: UnN0n Software Link: http://www.handypassword.com/download.shtml Version: 4.9.3 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open...

HandyPassword 4.9.3 - Overwrite (SEH)

HandyPassword 4.9.3 - Overwrite SEH ''' Exploit Title: HandyPassword SEH-Over Write Exploit Date: 9/24/2015 Exploit Author: UnN0n Software Link: http://www.handypassword.com/download.shtml Version: 4.9.3 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'HandyPassword.exe'. 2- Th...

VLC 2.2.1 Stack Overflow

Exploit Title: VLC | libvlccore - .mp3 Stack Overflow Date: 18/10/2015 Exploit Author: Andrea Sindoni Software Link: https://www.videolan.org/vlc/index.it.html Version: 2.2.1 Tested on: Windows 7 Professional 64 bits APP: vlc.exe ANALYSISVERSION: 6.3.9600.17336 debuggersdbg.150226-1500 amd64fre...

Free WMA MP3 Converter - Buffer Overflow Exploit (SEH)

Document Title: =============== Free WMA MP3 Converter - Buffer Overflow Exploit SEH References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1620 Release Date: ============= 2015-10-19 Vulnerability Laboratory ID VL-ID: ==================================== 1620...

VideoLAN VLC Media Player 2.2.1 - libvlccore .mp3 Stack Overflow

VideoLAN VLC Media Player 2.2.1 - libvlccore .mp3 Stack Overflow Exploit Title: VLC | libvlccore - .mp3 Stack Overflow Date: 18/10/2015 Exploit Author: Andrea Sindoni Software Link: https://www.videolan.org/vlc/index.it.html Version: 2.2.1 Tested on: Windows 7 Professional 64 bits PoC with MP3:...

VLC 2.2.1 libvlccore - (.mp3) Stack Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: VLC | libvlccore - .mp3 Stack Overflow Date: 18/10/2015 Exploit Author: Andrea Sindoni Software Link: https://www.videolan.org/vlc/index.it.html Version: 2.2.1 Tested on: Windows 7 Professional 64 bits PoC with MP3:...

Tomabo MP4 Player 3.11.6 - SEH Based Stack Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.6 SEH Based Stack Overflow Exploit Author: @yokoacc, @nudragn, @runggareksya Vendor Homepage: http://www.tomabo.com/ Software Link: http://www.tomabo.com/mp4-player/download.html...

Tomabo MP4 Player 3.11.6 - Local Stack Overflow (SEH)

Tomabo MP4 Player 3.11.6 - Local Stack Overflow SEH !/usr/bin/python Exploit Title: Tomabo MP4 Player 3.11.6 SEH Based Stack Overflow Exploit Author: @yokoacc, @nudragn, @runggareksya Vendor Homepage: http://www.tomabo.com/ Software Link: http://www.tomabo.com/mp4-player/download.html Vulnerable...

VideoLAN VLC Media Player 2.2.1 - libvlccore '.mp3' Stack Overflow

Exploit Title: VLC | libvlccore - .mp3 Stack Overflow Date: 18/10/2015 Exploit Author: Andrea Sindoni Software Link: https://www.videolan.org/vlc/index.it.html Version: 2.2.1 Tested on: Windows 7 Professional 64 bits PoC with MP3:...

Windows 10 Upgrade Become More Creepy, No Option to Opt-Out

If you are running Windows 7 or Windows 8.1 and have no plans to switch to Windows 10, then Microsoft could force you to install Windows 10, making it harder for you to cancel or opt-out of upgrading. Note: Above image has been photoshopped, but the original screenshot taken by Windows users is...

AdobeWorkgroupHelper 2.8.3.3 - Local Stack Buffer Overflow

AdobeWorkgroupHelper 2.8.3.3 - Local Stack Buffer Overflow ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-ADOBE-WRKGRP-BUFFER-OVERFLOW.txt Vendor: ================================ www.adobe.com Product:...

AdobeWorkgroupHelper 2.8.3.3 - Stack Based Buffer Overflow Exploit

Exploit for unix platform in category local exploits ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-ADOBE-WRKGRP-BUFFER-OVERFLOW.txt Vendor: ================================ www.adobe.com Product:...

Microsoft Inadvertently Disclosed Digital Certificates Advisory (3097966)

This host is missing an important security update according to Microsoft advisory 3097966. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

AdobeWorkgroupHelper 2.8.3.3 - Local Stack Buffer Overflow

''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-ADOBE-WRKGRP-BUFFER-OVERFLOW.txt Vendor: ================================ www.adobe.com Product: ================================= AdobeWorkgroupHelper.exe v2.8.3.3 Part of Photosh...

Blat 2.7.6 SMTP / NNTP Mailer - Local Buffer Overflow

''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-BLAT-MAILER-BUFFER-OVERFLOW.txt Vendor: ================================ www.blat.net http://sourceforge.net/projects/blat/ Product: ================================ Blat v2.7.6...

CVE-2015-2548

Use-after-free vulnerability in the Tablet Input Band in Windows Shell in Microsoft Windows Vista SP2 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Tablet Input Band Use After Free Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in the Tablet Input Band in Windows Shell in Microsoft Windows Vista SP2 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Tablet Input Band Use After Free Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted toolbar...

CVE-2015-2548

Use-after-free vulnerability in the Tablet Input Band in Windows Shell in Microsoft Windows Vista SP2 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Tablet Input Band Use After Free Vulnerability."...

CVE-2015-2550

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege...