Microsoft Windows Graphics Component CVE-2015-1645 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya CallPilot 4.0 Avaya...

Microsoft XML Core Services CVE-2015-1646 Same Origin Policy Security Bypass Vulnerability

Description Microsoft XML Core Services is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the same-origin policy and perform unauthorized actions. This could be used to steal sensitive information or launch other attacks. Technologies Affected Avaya CallPil...

KLA10550 Code execution vulnerability in Microsoft HTTPS.sys

An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTTP request. Original advisories MS15-034 CVE-2015-1635 Exploitation Public exploits...

WordPress Plugin Video Gallery 2.8 - SQL Injection

Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.8.zip Dork Google:...

Adobe Flash Player - casi32 Integer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player casi32 Integer Overflow', 'Description' = %q This module exploits an integer overflow in Adobe Flash Player. The...

Adobe Flash Player casi32 Integer Overflow Exploit

This Metasploit module exploits an integer overflow in Adobe Flash Player. The vulnerability occurs in the casi32 method, where an integer overflow occurs if a ByteArray of length 0 is setup as domainMemory for the current application domain. This Metasploit module has been tested successfully on...

Adobe Flash Player casi32 Integer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player casi32 Integer Overflow', 'Description' = %q This module exploits an integer overflow in Adobe Flash Player. The...

Novell ZENworks Configuration Management 11.3.1 - Remote Code Execution

Remote code execution in Novell ZENworks Configuration Management 11.3.1 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 07/04/2015 / Last updated: 07/04/2015 Background on the...

PyScripter DLL Hijacking

/ + Author: TUNISIAN CYBER + Exploit Title: PyScriper DLL Hijacking + Date: 05-04-2015 + Type: Local Exploits + Vendor: https://code.google.com/p/pyscripter/ + Tested on: WinXp/Windows 7 Pro + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + gcc -shared -o svrapi.dll dllhijack.c then put...

IDM-6.20-Local-Buffer

Author: TUNISIAN CYBER + Exploit Title: IDM v6.20 Local Buffer Overflow + Date: 27-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: https://www.internetdownloadmanager.com/ + Friendly Sites: sec4ever.com...

Adobe Flash Player ByteArray With Workers Use After Free Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ByteArray With Workers Use After Free', 'Description' = ...

Adobe Flash Player - ByteArray With Workers Use-After-Free (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ByteArray With Workers Use After Free', 'Description' = %q This module exploits an use after free vulnerability i...

Acunetix-9.5

Date: 27 Mar 2015 Version: 9.5 Tested on: Windows 7 Description: Acunetix Login Sequence Recorder lsr.exe Uses CoCreateInstance API From Ole32.dll To Record Target Login Sequence Exploit Based on MS14-064 CVE2014-6332 http://www.exploit-db.com/exploits/35229/ This Python Script Will Start A Sampl...

RM-Downloader-2.7.5.400

Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://software-files-a.cnet.com/s/software/10/65/60/49/Mini-streamRM-MP3Converter.exe?token=142731898198f71d0e10e2e3bd2e730179341feb0a + Friendly...

Mini-stream-Ripper-v2.7.7.100

Exploit Title: Mini-sream Ripper v2.7.7.100 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://software-files-a.cnet.com/s/software/10/65/60/43/Mini-streamRipper.exe?token=14273348648d9c5d7d948871f54ae14ed9304d1ddf + Friendly Sites:...

Adobe Flash Player ByteArray With Workers Use After Free

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ByteArray With Workers Use After Free', 'Description' = %q This module exploits an use after free vulnerability i...

ZIP Password Recovery Professional 7.1 DLL Hijacking

/ + Author: TUNISIAN CYBER + Exploit Title: ZIP Password Recovery Professional 7.1 DLL Hijacking + Date: 29-03-2015 + Type: Local Exploits + Vendor: http://www.recoverlostpassword.com/products/zippasswordrecovery.htmlcompare + Tested on: WinXp/Windows 7 Pro + Friendly Sites: sec4ever.com + Twitte...

UltraISO 9.6.2.3059 DLL Hijacking

Author: TUNISIAN CYBER + Exploit Title: UltraISO v9.6.2.3059 DLL Hijacking + Date: 28-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + Poc:http://i.imgur.com/naHAdJF.png + Create Compile the file then rename it to daemon.dll then...

BZR Player 1.03 DLL Hijacking

/ + Author: TUNISIAN CYBER + Exploit Title: BZR Player 1.03 DLL Hijacking + Date: 29-03-2015 + Type: Local Exploits + Vendor: http://bzrplayer.blazer.nu/ + Tested on: WinXp/Windows 7 Pro + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + gcc -shared -o DLLNAMEchoose one from the lis below.dll...

HTTrack Website Copier 3.48-21 DLL Hijacking

Author: TUNISIAN CYBER + Exploit Title: HTTrack Website Copier v3.48-21 DLL Hijacking + Date: 28-03-2015 + Type: Local Exploits + Vendor: https://httrack.com/page/2/fr/index.html + Tested on: WinXp/Windows 7 Pro + Friendly Sites: sec4ever.com + Twitter: @TCYB3R + Create Compile the file then...