Microsoft Internet Explorer SetMouseCapture Use-After-Free

This Metasploit module exploits a use-after-free vulnerability that targets Internet Explorer 9 on Windows 7. The flaw most likely exists in versions 6/7/8/9/10/11. It was initially found in the wild in Japan, but other regions such as English, Chinese, Korean, etc, were targeted as well. The...

Abuse HTTP Server 2.8 Denial Of Service Vulnerability

Abuse HTTP Server version2 .8 suffers from a remote denial of service vulnerability. Proof of concept python code included. Advisory Information : ====================== Title : Abuse HTTP Server 2.8 - Remote Denial Of Service Advisory ID : Cr02013-002 Product : HTTP Server Vendor : SmartUX...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Micorosft Internet Explorer - SetMouseCapture Use-After-Free (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Micorosft Interne...

KMPlayer 3.7.0.109 (.wav) - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS. Date: 29-9-2013 Exploit Author: xboz Vendor Homepage: http://www.kmpmedia.net/ Software Link: http://update.kmpmedia.net/player/download/28 Version: 3.7.0.109 Tested on: Windows 7,8...

Microsoft Internet Explorer SetMouseCapture Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Micorosft Interne...

Abuse HTTP Server 2.8 Denial Of Service

Advisory Information : ====================== Title : Abuse HTTP Server 2.8 - Remote Denial Of Service Advisory ID : Cr02013-002 Product : HTTP Server Vendor : SmartUX Vulnerable Versions : 2.8 and probably prior release Tested Version : 2.8 Tested On : Windows XP, Windows 7 Vulnerability Type /...

ArticleSetup Multiple Vulnerabilities

ArticleSetup Multiple Vulnerabilities Exploit Title : ArticleSetup Multiple Vulnerabilities Author : DevilScreaM Date : 21/09/2013 Category : Web Applications Vendor : http://www.articlesetup.com/ Version : 1.0 Dork intext:Powered By Article Marketing Vulnerability : Cross Site Scripting , SQL...

KMPlayer 3.7.0.109 - '.wav' Crash (PoC)

Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS. Date: 29-9-2013 Exploit Author: xboz Vendor Homepage: http://www.kmpmedia.net/ Software Link: http://update.kmpmedia.net/player/download/28 Version: 3.7.0.109 Tested on: Windows 7,8 header =...

ArticleSetup - Multiple Vulnerabilities

Exploit Title : ArticleSetup Multiple Vulnerabilities Author : DevilScreaM Date : 21/09/2013 Category : Web Applications Vendor : http://www.articlesetup.com/ Version : 1.0 Dork intext:Powered By Article Marketing Vulnerability : Cross Site Scripting , SQL Injection Tested On : Windows 7, Ubuntu...

Share KM 1.0.19 - Remote Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc Title : Share KM 1.0.19 - Remote Denial Of Service Product : Share KM desktop setup file Vendor : SmartUX Vulnerable Versions : 1.0.19 and probably prior release Tested Version : 1.0.19 Tested On : Windows 7 Vulnerability Type / CWE ID : Improper...

Share KM 1.0.19 - Remote Denial of Service

Share KM 1.0.19 - Remote Denial of Service Advisory Information : ====================== Title : Share KM 1.0.19 - Remote Denial Of Service Advisory ID : Cr02013-001 Product : Share KM desktop setup file Vendor : SmartUX Vulnerable Versions : 1.0.19 and probably prior release Tested Version :...

Share KM 1.0.19 - Remote Denial of Service

Advisory Information : ====================== Title : Share KM 1.0.19 - Remote Denial Of Service Advisory ID : Cr02013-001 Product : Share KM desktop setup file Vendor : SmartUX Vulnerable Versions : 1.0.19 and probably prior release Tested Version : 1.0.19 Tested On : Windows 7 Vulnerability Typ...

Microsoft Internet Explorer 'CAnchorElement'释放后重用内存破坏漏洞

BUGTRAQ ID: 62376 Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 8的标准模式中，如果首先创建不合逻辑的表树，即CPhraseElement在CTableRow后面，且最后的节点在子表元素，则会造成释放后重用。攻击者通过诱使用户查看特制的网页，利用此漏洞可在当前用户上下文中执行任意代码 0 Microsoft Internet Explorer 8 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS13-055）以及相应补丁:...

TeraCopy 2.3 (default.mo) Language File Integer Overflow Vulnerability

Code Sector TeraCopy versions 2.3 beta 2 and 2.27 integer overflow proof of concept exploit. TeraCopy is prone to an integer overflow vulnerability because it fails to perform adequate boundary checks when reading language files. Successfully exploiting this issue may allow local attackers to...

Microsoft Internet Explorer SetMouseCapture Use-After-Free

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help. URL that triggers loading of hxds.dll. Recent...

Agnitum Outpost Internet Security - Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Agnitum Outpost Internet Security Local Privilege Escalation

This Metasploit module exploits a directory traversal vulnerability on Agnitum Outpost Internet Security 8.1. The vulnerability exists in the acs.exe component, allowing the user to load load arbitrary DLLs through the acsipcserver named pipe, and finally execute arbitrary code with SYSTEM...

Agnitum Outpost Internet Security Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Image Uploader Shell Upload

Exploit Title : Image uploader Neturf File Upload Vulnerability + Google Dork : intext:"Powered by: Neturf" inurl:/index.php?Action= + Date : 14/09/2013 + Exploit Author : IranianDarkCodersTeam + Discovered By : am22Hacker Pir + Exploit By : Black.Hack3r + Home : http://www.idc-team.net +...