CVE-2015-2515

CVE-2015-2515 is a remote code execution vulnerability in Windows Shell caused by a use-after-free when handling crafted toolbar objects. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, Windows RT/RT 8.1, and ...

Microsoft Windows Privilege Elevation Vulnerabilities (3096447)

This host is missing an important security update according to Microsoft Bulletin MS15-111. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

AdobeWorkgroupHelper.exe 2.8.3.3 Buffer Overflow Exploit

If AdobeWorkgroupHelper.exe is called with an overly long command line argument it is vulnerable to a stack based buffer overflow exploit. Version 2.8.3.3 is affected. Vendor: ================================ www.adobe.com Product: ================================= AdobeWorkgroupHelper.exe v2.8.3...

Tomabo MP4 Converter 3.10.12 Denial Of Service

!/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Homepage: http://www.tomabo.com/mp4-converter/index.html Version: 3.10.12 Tested on: windows 7 x86...

CDex Genre 1.79 - Local Stack Buffer Overflow

''' Exploit Title: CDex Genre Stack Buffer Overflow Date: 10/9/2015 Exploit Author: UnN0n Software Link: http://cdex.mu/download Version: 1.79 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- Generate a File by python code mentioned below. 2- Goto...

CDex Genre 1.79 - Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits ''' Exploit Title: CDex Genre Stack Buffer Overflow Date: 10/9/2015 Exploit Author: UnN0n Software Link: http://cdex.mu/download Version: 1.79 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- Generate a File by python code...

CDex Genre 1.79 - Local Stack Buffer Overflow

CDex Genre 1.79 - Local Stack Buffer Overflow ''' Exploit Title: CDex Genre Stack Buffer Overflow Date: 10/9/2015 Exploit Author: UnN0n Software Link: http://cdex.mu/download Version: 1.79 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- Generate a File by python code mentioned below...

Tomabo MP4 Converter 3.10.12 - 3.11.12 (.m3u) Denial of service (Crush application)

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim email protected E-Mail: vulnbug gmail.com Vendor Homepage:...

KLA10674 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper information...

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

Tomabo MP4 Converter 3.10.12 < 3.11.12 - '.m3u' File Crush Application (Denial of Service)

!/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Homepage: http://www.tomabo.com/mp4-converter/index.html Version: 3.10.12 Tested on: windows 7 x86...

Radiant CMS v 1.1.4 - CSRF Vulnerability

Exploit for php platform in category web applications Title : Radiant CMS v 1.1.4 - CSRF Exploit Author : ZwX Date : 16/07/2015 Download : http://radiantcms.org/download/ Vendor : http://radiantcms.org/ Level Security : Medium Tested on : Windows 7 +----------------------+ Description & Detail...

Free-YouTube-To-MP3-Converter 4.0.1 - Buffer Overflow Vulnerability

FreeYouTubeToMP3 Converter version 4.0.1 suffers from a buffer overflow vulnerability. ----------------------------------------------------- Exploit Title : Free-YouTube-To-MP3-Converter - Buffer Overflow Vulnerability Date : 28/09/2015 Exploit Author : ZwX Software Vendor :...

FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...

Wordpress EZ Portfolio 1.0.1 plugin - Multiple Persistant XSS Vulnerability

Exploit for php platform in category web applications Title : Wordpress EZ Portfolio 1.0.1 plugin - Multiple Persistant XSS vulnerability Author : ZwX Date : 22/02/2015 Downoload : https://downloads.wordpress.org/plugin/ez-portfolio.1.0.1.zip Vendor : http://webbisivut.org/ Level Security : Low...

UltraSentry - Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits Title Exploit : UltraSentry - Buffer Overflow Vulnerability Date : 19/09/2015 Author : ZwX Software Vendor : http://www.ultraedit.com/ Software Link: http://www.ultraedit.com/downloads/ultrasentry.html Version: 15.0 Tested on: Windows 7 site...

IconLover - Remote Code Execution / Stack Buffer Overflow Vulnerabilities

Exploit for windows platform in category local exploits Title Exploit : IconLover - Remote Code Execution / Stack Buffer Overflow Vulnerabilities Author : ZwX Software Vendor : http://www.aha-soft.com/ Software Link: http://www.aha-soft.com/iconlover/index.htm Tested on: Windows 7 site :...

HP SiteScope DNS Tool Command Injection Exploit

This Metasploit module exploits a command injection vulnerability discovered in HP SiteScope 11.30 and earlier versions tested in 11.26 and 11.30. The vulnerability exists in the DNS Tool allowing an attacker to execute arbitrary commands in the context of the service. By default, HP SiteScope...

Wordpress EZ Google Analytics Plugin 4.1.6 - Persistant XSS Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin : EZ Google Analytics 4.1.6 - Persistant XSS vulnerability Author : ZwX Date : 15/02/2015 Downoload : https://downloads.wordpress.org/plugin/ez-google-analytics.4.1.06.zip Vendor : http://wordpress.ieonly.com Tested on...

VeryPDF Image2PDF Converter SEH Buffer Overflow

Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title paramet...