VeryPDF Image2PDF Converter SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: email protected Website: CVE:...

VeryPDF Image2PDF Converter - Local Buffer Overflow (SEH)

Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title paramet...

VeryPDF Image2PDF Converter - Local Buffer Overflow (SEH)

VeryPDF Image2PDF Converter - Local Buffer Overflow SEH Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: [email protected] Website: CVE...

Last PassBroker 3.2.16 Buffer Overflow

''' Exploit Title: Last PassBroker Stack-based BOF Date: 9/23/2015 Exploit Author: UnN0n Software Link: https://lastpass.com/download Version: 3.2.16 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'LastPassBroker.exe'. 2- A Input-Box will appear asking for Email and Password, ...

LanWhoIs.exe 1.0.1.120 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANWHOIS-BUFFER-OVERFLOW-10062015.txt Vendor: ================================ www.lantricks.com Product: ================================ LanWhoIs.exe 1.0.1.120 LanWhoIs querys and...

Last PassBroker 3.2.16 - Stack Buffer Overflow (PoC)

''' Exploit Title: Last PassBroker Stack-based BOF Date: 9/23/2015 Exploit Author: UnN0n Software Link: https://lastpass.com/download Version: 3.2.16 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'LastPassBroker.exe'. 2- A Input-Box will appear asking for Email and Password, ...

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow (PoC)

''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANWHOIS-BUFFER-OVERFLOW-10062015.txt Vendor: ================================ www.lantricks.com Product: ================================ LanWhoIs.exe 1.0.1.120 LanWhoIs querys an...

Last PassBroker 3.2.16 - Stack-Based Buffer Overflow Exploit

Exploit for windows platform in category dos / poc ''' Exploit Title: Last PassBroker Stack-based BOF Date: 9/23/2015 Exploit Author: UnN0n Software Link: https://lastpass.com/download Version: 3.2.16 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'LastPassBroker.exe'. 2- A...

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow Exploit

Exploit for windows platform in category dos / poc ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANWHOIS-BUFFER-OVERFLOW-10062015.txt Vendor: ================================ www.lantricks.com Product:...

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow (PoC)

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow PoC ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANWHOIS-BUFFER-OVERFLOW-10062015.txt Vendor: ================================ www.lantricks.com Product:...

Last PassBroker 3.2.16 - Stack Buffer Overflow (PoC)

Last PassBroker 3.2.16 - Stack Buffer Overflow PoC ''' Exploit Title: Last PassBroker Stack-based BOF Date: 9/23/2015 Exploit Author: UnN0n Software Link: https://lastpass.com/download Version: 3.2.16 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'LastPassBroker.exe'. 2- A...

APPLE-SA-2015-09-16-3 iTunes 12.3

APPLE-SA-2015-09-16-3 iTunes 12.3 iTunes 12.3 is now available and addresses the following: iTunes Available for: Windows 7 and later Impact: Applications that use CoreText may be vulnerable to unexpected application termination or arbitrary code execution Description: Multiple memory corruption...

WinRar < 5.30 Beta 4 - Settings Import Command Execution

!/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" function. Since Settings file of Winrar are saved as a registr...

Microsoft 'Accidentally' pushed 'Test patch' Update to All Windows 7 Users

A highly mysterious update that was pushed out to Windows machines globally was the result of a test that was not correctly implemented. Yes, Microsoft accidentally released a test patch KB3877432 to consumer machines running Windows 7, making users believe that the Windows Update service got...

Mystery Windows 7 Update An Accidental Test Update

A suspicious Windows 7 update today raised concern on a number of Microsoft and technology forums that the Windows Update service had been compromised. Microsoft, however, cleared the air several hours later admitting that the update was their mistake. “We incorrectly published a test update and...

ManageEngine EventLog Analyzer Remote Code Execution Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ManageEngine EventLog Analyzer Remote Code Execution', 'Description' = %q...

Mango Automation 2.6.0 - Multiple Vulnerabilities

Mango Automation 2.6.0 - Multiple Vulnerabilities Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a...

ManageEngine EventLog Analyzer Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ManageEngine EventLog Analyzer Remote Code Execution', 'Description' = %q This module exploits a SQL query functionality in...

Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table

Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTINFREEDSPECIALPOOL d5 Memory was referenced after it...

FreshFTP 5.52 - .qfl Crash (PoC)

FreshFTP 5.52 - .qfl Crash PoC Exploit Title: FreshFTP .QFL Local DOSWhile Parsing. Date: 9/15/2015 Exploit Author: UnN0n Software Vendor : http://www.freshwebmaster.com/ Software Link: http://www.freshwebmaster.com/download.html Version: 5.52 Tested on: Windows 7 x8632 BIT Steps to Produce the...