February 2014 Microsoft Patch Tuesday Security Bulletins

The expected continued respite from deploying Internet Explorer patches was apparently a mirage as Microsoft changed course from last Thursday’s advance notification and added two more bulletins to the February 2014 Patch Tuesday security updates, including the first IE rollup of 2014. IE had...

Microsoft Windows - TrackPopupMenuEx Win32k NULL Page (MS13-081) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows TrackPopupMenuEx Win32k NULL Page', 'Description' = %q...

Microsoft XML Core Services CVE-2014-0266 Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can leverage this issue to read files on the local file system or obtain sensitive information; this may aid in other attacks. Attackers can exploit this issue by enticing an unsuspectin...

Windows TrackPopupMenuEx Win32k NULL Page

This Metasploit module exploits a vulnerability in win32k.sys where under specific conditions TrackPopupMenuEx will pass a NULL pointer to the MNEndMenuState procedure. This Metasploit module has been tested successfully on Windows 7 SP0 and Windows 7 SP1. This module requires Metasploit:...

Windows TrackPopupMenuEx Win32k NULL Page

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows TrackPopupMenuEx Win32k NULL Page', 'Description' = %q...

MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014

None None...

[Quarks PwDump] Dump Windows Credentials

Quarks PwDump is new open source tool to dump various types of Windows credentials: local account, domain accounts, cached domain credentials and bitlocker. The tool is currently dedicated to work live on operating systems limiting the risk of undermining their integrity or stability. It requires...

Publish-It 3.6d - .pui Local Buffer Overflow (SEH)

Publish-It 3.6d - .pui Local Buffer Overflow SEH !/usr/bin ruby env Exploit Title: Publish-It 3.6d - SEH Buffer Overflow Date: 8/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: https://www.postersw.com Software Link: https://www.postersw.com/publish3.exe Version App: v3.6d Tested on:...

Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH)

!/usr/bin ruby env Exploit Title: Publish-It 3.6d - SEH Buffer Overflow Date: 8/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: https://www.postersw.com Software Link: https://www.postersw.com/publish3.exe Version App: v3.6d Tested on: Windows 7 x86 - Version 6.1.7600 CVE:None Notes:...

Publish-It 3.6d Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Publish-It Buffer Overflow Vulnerability 1. Advisory Information Title: Publish-It Buffer Overflow Vulnerability Advisory ID: CORE-2014-0001 Advisory URL:...

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service Pack 5 - Desktop Edition 1.1.5.1247 1.0 Application download...

Adobe Flash Player Integer Underflow Remote Code Execution

This module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 12.0.0.43. By supplying a specially crafted swf file it is possible to trigger an integer underflow in several avm2 instructions, which can be turned into remote code execution under the context of th...

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow SEH ASLR + DEP Bypass !/usr/bin env ruby Exploit Title: Adrenalin Player 2.2.5.3 .m3u SEH-Buffer Overflow ASLR+DEP Bypass Date: 3/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage:...

Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

!/usr/bin env ruby Exploit Title: Adrenalin Player 2.2.5.3 .m3u SEH-Buffer Overflow ASLR+DEP Bypass Date: 3/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Software Link:...

NCH Software Inventoria 3.45 Cross Site Scripting Vulnerability

NCH Software Inventoria version 3.45 suffers from a cross site scripting vulnerability. NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business...

PCMAN FTP 2.07 CWD Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: email protected import socket as s from sys import argv iflenargv != 4...

NCH Software Inventoria 3.45 Cross Site Scripting

NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business inventory management and stock control software that allows you to manage and monitor your...

PCMAN FTP 2.07 ABOR Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: email protected import socket as s from sys import argv iflenargv != ...

Amin'z Tech CMS Shell Upload / SQL Injection

---------------------------------------------- Exploit Title : Amin'z Tech Login Page SQL Injection Bypass / Upload shell vulnerability Exploit Author : ACC3SS Vendor Homepage : http://www.aminztech.com Google Dork : intext:"AMIN'Z TECH" inurl:panel Date: 2014-01-16 Tested on: Windows 7...

PCMan FTP Server 2.07 - ABOR Remote Buffer Overflow

PCMan FTP Server 2.07 - ABOR Remote Buffer Overflow Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: [email protected] import socket as s from sys import argv iflenargv != 4...