STIMS Buffer 1.1.20 - Buffer Overflow SEH (Denial of Service)

Exploit for windows platform in category dos / poc Exploit Title: STIMS BUFFER OVERFLOW SEH OVERWRITE Date: 19 Feb 2016 Exploit Author: Ishita Sailor Vendor Homepage: http://www.stimslabs.com/ Software Link: http://www.stimslabs.com/en/buffer/STIMSBufferEnSetup.exe Version: 1.1.20 Tested on:...

STIMS Buffer 1.1.20 - Buffer Overflow (PoC) (SEH Overwrite)

STIMS Buffer 1.1.20 - Buffer Overflow PoC SEH Overwrite Exploit Title: STIMS BUFFER OVERFLOW SEH OVERWRITE Date: 19 Feb 2016 Exploit Author: Ishita Sailor Vendor Homepage: http://www.stimslabs.com/ Software Link: http://www.stimslabs.com/en/buffer/STIMSBufferEnSetup.exe Version: 1.1.20 Tested on:...

Easy File Sharing Web Server HEAD HTTP request vulnerability

Added: 01/08/2016 Background Easy File Sharing Web Server is software that allows users to upload/download files to a server easily through a web browser, as well as providing a bulletin board system forum. Problem Easy File Sharing Web Server is vulnerable to a stack buffer overflow condition as...

KNX ETS 4.1.5 Build 3246 Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits Title: Remote code execution vulnerability in the KNX management software ETS Category/Abstract: Buffer overflow vulnerability Product: ETS Engineering Tool Software Affected versions: ETS 4.1.5 Build 3246 no other versions tested Fixed in...

BisonWare BisonFTP Server 3.5 Buffer Overflow Exploit

BisonWare BisonFTP Server version 3.5 is prone to an overflow condition. This Metasploit module exploits a buffer overflow vulnerability in said application. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL:...

KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-004 Publication Date: 2015.09.01 Publication URL:...

Boxoft WAV To MP3 COnverter 1.1 Buffer Overflow

Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. category: Local Exploit f = open"malicious.aiff", "w"...

ASX to MP3 Converter 1.82.50 (Windows XP SP3) - '.asx' Local Stack Overflow

''' Exploit Title: ASX to MP3 Converter 1.82.50 Stack Overflow Date: 2 Oct 2015 Exploit Author: exptr Vendor Homepage: http://mini-stream.net Version: 1.82.50 Tested on: Windows XP SP3 ''' import struct filename = "exploit.asx" dummy = "A"0x104 EIP = struct.pack'I', 0x76af3adc FFFF =...

ASX to MP3 Converter 1.82.50 (Windows XP SP3) - .asx Local Stack Overflow

ASX to MP3 Converter 1.82.50 Windows XP SP3 - .asx Local Stack Overflow ''' Exploit Title: ASX to MP3 Converter 1.82.50 Stack Overflow Date: 2 Oct 2015 Exploit Author: exptr Vendor Homepage: http://mini-stream.net Version: 1.82.50 Tested on: Windows XP SP3 ''' import struct filename = "exploit.as...

WinRar 5.21 - SFX OLE Command Execution

!/usr/bin/python -w Title : WinRar SFX OLE Command Execution Date : 25/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 Triggering the Vulnerability Run this python script Right click a file and then click on add to archive. check the 'Create SFX archive' box go to Advanced tab...

Konica Minolta FTP Utility 1.0 - Remote Command Execution Exploit

Exploit for windows platform in category remote exploits Title: Konica Minolta FTP Utility - Remote Command Execution Date : 20/09/2015 Author: R-73eN Software: Konica Minolta FTP Utility v1.0 Tested: Windows XP SP3 Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip...

Konica Minolta FTP Utility 1.0 - Remote Command Execution

Title: Konica Minolta FTP Utility - Remote Command Execution Date : 20/09/2015 Author: R-73eN Software: Konica Minolta FTP Utility v1.0 Tested: Windows XP SP3 Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Every command is vulnerable to buffer overflow. import sock...

Konica Minolta FTP Utility 1.0 - Remote Command Execution

Konica Minolta FTP Utility 1.0 - Remote Command Execution Title: Konica Minolta FTP Utility - Remote Command Execution Date : 20/09/2015 Author: R-73eN Software: Konica Minolta FTP Utility v1.0 Tested: Windows XP SP3 Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip...

XGI Windows VGA Display Manager 6.14.10.1090 - Arbitrary Write (PoC)

XGI Windows VGA Display Manager 6.14.10.1090 - Arbitrary Write PoC KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-004 Publication Date: 2015.09.01 Publicati...

SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where (PoC)

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1...

XGI Windows VGA Display Manager 6.14.10.1090 - Arbitrary Write PoC

Exploit for windows platform in category dos / poc Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-004.txt 1. Vulnerability Details Affected Vendor: Silicon Integrated Systems Corporation...

SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where PoC

Exploit for windows platform in category dos / poc Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1. Vulnerability Details Affected Vendor: Silicon Integrated...

XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation

Vulnerability Details Affected Vendor: Silicon Integrated Systems Corporation Affected Product: XGI VGA Display Manager Affected Version: 6.14.10.1090 Platform: Microsoft Windows XP SP3 CWE Classification: CWE-123: Write-what-where condition Impact: Arbitrary Code Execution Attack vector: IOCTL...

PCMan FTP Server 2.0.7 - RENAME Command Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: PCMan's FTP Server v2.0 - RENAME command remote buffer overflow Date: 29 Aug 2015 Exploit Author: Koby Vendor Homepage: http://pcman.openfoundry.org/ Version: 2.0.7 Tested on: Windows XP SP3 import socket...