Microsoft DirectX DirectShow AVI File Parsing Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability. Successful exploits allow remote attackers to execute arbitrary code in the context of the user running an application that uses DirectX. Failed exploit attempts will result in a denial-of-service condition...

PHP Apps Links Insecure Cookie Handling

Exploit Title: PHP Apps Links Insecure Cookie Handling Vulnerability‏ Date: 15.09.2009 Author: JIKO Software Link: http://www.mixarab.com/scripts/links.zip Version: app version Tested on: relevant os CVE : if exists Code : ----------exploit Debut Insecure Cookie Handling Vulnerability ----------M...

PT-2010-2050 · Microsoft · Directshow +8

Name of the Vulnerable Software and Affected Versions: Microsoft DirectX versions prior to the fixed version Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Gold, SP1, and SP2 Microsoft Windows Server 2008 Gold, SP2, and R2...

SQLite Browser v2.0b1 Local DoS Vulnerability

No description provided by source. Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows XP SP2/SP3 x86, Vista x86, Windows 7 x64 Code : A specially crafted SQL file query can cause the the application to freeze and finally crash. The bug is th...

SQLite Browser 2.0b1 - Local Denial of Service

SQLite Browser 2.0b1 - Local Denial of Service Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows XP SP2/SP3 x86, Vista x86, Windows 7 x64 Code : A specially crafted SQL file query can cause the the application to freeze and finally crash. T...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Diese Prüfung bezieht sich auf die 11...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Diese Prüfung bezieht sich auf die 11...

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters (Windows)

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94220 Diese Prüfung bezieht sich auf die 11...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

No description provided by source. Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 html object classid='clsid:C2828995-4A83-4100-A212-3024BA117356' id='target'...

Windows Live Messenger 2009 Active-X Heap Overflow

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC downloads :http://download.live.com/ Date : 2010/01/21 tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow PoC Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Windows Live Messenger 2009 ActiveX Heap Overflow PoC ===================================================== Aouther : SarBoT511 Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflo...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live SkyDrive\Microsoft.Live.Folders.RichUpload.3.dll" prototype = "Property...

17 Year-Old Windows Security Hole Found

A now published hole in Windows allows users with restricted access to escalate their privileges to system level – and this is believed to be possible on all 32-bit versions of Windows from Windows NT 3.1 up to, and including Windows 7. Read the full article. The H Security...

0day sogou input method loopholes to gain system permissions-bug warning-the black bar safety net

Unintentionally found a very serious vulnerability, and the year 3 3 8 9 input loophole similar. However, temporary does not affect the not system is not loaded sogou input method, not login system. If the remote server installed sogou, the login system is loaded after the search dogs, but not...

Microsoft Windows Defender Active-X Heap Overflow Version 1

Aouther : SarBoT511 Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC downloads :www.microsoft.com Date : 2010/01/19 tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub DeleteValue ByVal bstrKeyName As...

Microsoft Windows Defender Active-X Heap Overflow Version 2

Aouther : SarBoT511 Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC downloads :www.microsoft.com Date : 2010/01/19 tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub WriteValue ByVal bstrKeyName As...

0day vulnerability Sogou input method to obtain system privileges

0day vulnerability Sogou input method to obtain system privileges Vulnerability: Do not intend to found a very serious vulnerability, and the year 3389 input loophole similar.However, no system was not being loaded does not affect input method logged in system. If the remote server installed ,...

Microsoft Windows Defender ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Microsoft Windows Defender ActiveX Heap Overflow PoC ==================================================== Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows...

Internet Explorer 6/7/8 DOS Vulnerability (Shockwave Flash Object)

No description provided by source. Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: http://www.exploit-db.com/sploits/iecrash.tar.gz http://sebug.net/paper/Exploits-Archives/2010-exploits/1001-exploits/iecrash.tar.gz Description: Modified 1360. byte to 44, 1361. to 43, 136...