CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

Ability FTP Server 2.1.4 - afsmain.exe USER Remote Denial of Service

Ability FTP Server 2.1.4 - afsmain.exe USER Remote Denial of Service !/usr/bin/env python Exploit Title: Ability FTP Server afsmain.exe USER Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Microsoft HTML Help Compiler 4.74.8702.0 - Local Overflow (SEH)

Microsoft HTML Help Compiler 4.74.8702.0 - Local Overflow SEH !/usr/bin/env python Exploit Title: Microsoft HTML Help Compiler SEH Based Overflow Date: 2015-08-13 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.microsoft.com Software Link:...

Ability FTP Server 2.1.4 - afsmain.exe USER Command Remote DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Ability FTP Server afsmain.exe USER Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Gkplugins Picasaweb - Download File

Gkplugins Picasaweb - Download File Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelength = $GET'l';...

Microsoft HTML Help Compiler 4.74.8702.0 - SEH Based Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: Microsoft HTML Help Compiler SEH Based Overflow Date: 2015-08-13 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.microsoft.com Software Link:...

Microsoft Windows HTA (HTML Application) - Remote Code Execution Exploit

Microsoft Windows HTA HTML Application remote code execution exploit that leverages MS14-064. !/usr/bin/php poc'."\n\n"; $reza = socketcreateAFINET, SOCKSTREAM, 0 or die'Failed to create socket!'; socketbind$reza, 0,$port; socketlisten$...

Ability FTP Server 2.1.4 - Admin Panel 'AUTHCODE' Remote Denial of Service

!/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link: http://www.codecrafters.com/AbilityFTPServer Version: 2.1.4 Tested on: Windows 7 import...

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Command Remote DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Gkplugins Picasaweb - Download File Vulnerability

Exploit for php platform in category web applications Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelengt...

MASM32 Quick Editor Buffer Overflow

!/usr/bin/env python Exploit Title: MASM32 quick editor .QSE SEH Based Buffer Overflow ASLR & SAFESEH bypass Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: http://www.masm32.com/ Software Link: http://www.masm32.com/masmdl.htm Version: MASM32 11 qeditor 4.0g Tested...

CVE-2015-2455

CVE-2015-2455 (TrueType Font Parsing Vulnerability) is a Windows font-processing defect discovered via Project Zero fuzzing of the Windows kernel font stack (win32k.sys and ATMFD.DLL) affecting TrueType fonts and related SFNT tables. The Google Project Zero report outlines that incorrect handling...

Microsoft HTML Help Compiler 4.74.8702.0 - Local Overflow (SEH)

!/usr/bin/env python Exploit Title: Microsoft HTML Help Compiler SEH Based Overflow Date: 2015-08-13 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.microsoft.com Software Link:...

Ability FTP Server 2.1.4 - 'afsmain.exe' 'USER' Remote Denial of Service

!/usr/bin/env python Exploit Title: Ability FTP Server afsmain.exe USER Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link: http://www.codecrafters.com/AbilityFTPServer Version: 2.1.4 Tested on: Windows 7 import sock...

Gkplugins Picasaweb - Download File

Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelength = $GET'l'; $filestream = $GET'start'; if$fileout!=""...

Immunity Canvas: ADOBE_FLASH_ID3

Name| adobeflashid3 ---|--- CVE| CVE-2015-5560 Exploit Pack| CANVAS Description| adobeflashid3 Notes| CVE Name: CVE-2015-5560 VENDOR: Adobe Notes: This module exploits a mishandling of large integers during the decoding of an ID3 tag. This situation leads to an integer overflow that eventually...

Windows 8.1 - DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076) Exploit

Exploit for windows platform in category local exploits Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory Usage: trebuchet.exe...

NetServe FTP Client 1.0 Local Buffer Overflow Exploit

Exploit for windows platform in category dos / poc Exploit Title: NetServe FTP Client 1.0 DOS Overflow. Date: 8/12/2015 Exploit Author: UnN0n Software Link: http://netserve-ftp-client.en.softonic.com/ Version: Version 1.0.0 Tested on: Windows 7 x6464 BIT Steps to Produce the Crash: 1- Open up...

Apple Quicktime Invalid mvhd Atom Size Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2015-0014 Apple Quicktime Invalid mvhd Atom Size Denial of Service Vulnerability August 13, 2015 CVE Number CVE-2015-3790 Description There is a denial of service vulnerability in Apple Quicktime. An attacker who can control the size of an mvhd atom can cause an...

NetServe FTP Client 1.0 - Local Denial of Service

NetServe FTP Client 1.0 - Local Denial of Service Exploit Title: NetServe FTP Client 1.0 DOS Overflow. Date: 8/12/2015 Exploit Author: UnN0n Software Link: http://netserve-ftp-client.en.softonic.com/ Version: Version 1.0.0 Tested on: Windows 7 x6464 BIT Steps to Produce the Crash: 1- Open up...