Microsoft Windows XP SP3 - MQAC.sys Arbitrary Write Privilege Escalation

Microsoft Windows XP SP3 - MQAC.sys Arbitrary Write Privilege Escalation Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-003 Publication Date: 2014.07.18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt 1...

Microsoft Windows XP SP3 - 'MQAC.sys' Arbitrary Write Privilege Escalation

Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-003 Publication Date: 2014.07.18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt 1. Vulnerability Details Affected Vendor: Microsoft Affected Product: MQ Access Contr...

Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation

Vulnerability Details Affected Vendor: Microsoft Affected Product: Bluetooth Personal Area Networking Affected Versions: 5.1.2600.5512 Platform: Microsoft Windows XP SP3 CWE Classification: CWE-123: Write-what-where Condition Impact: Privilege Escalation Attack vector: IOCTL CVE ID:...

MS14-062 Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation

A vulnerability within Microsoft Bluetooth Personal Area Networking module, BthPan.sys, can allow an attacker to inject memory controlled by the attacker into an arbitrary location. This can be used by an attacker to overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently callin...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

Advantech WebAccess dvs.ocx GetColor Buffer Overflow

This module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This module has been tested successfully on Windows XP SP3...

Update Your Java to Patch 20 Vulnerabilities Or Just Disable it

Today, Oracle has released its quarterly Critical Patch Update CPU for the month of July, as part of its monthly security bulletin, in which it fixes a total of 113 new security vulnerabilities for hundreds of the company’s products. The security update for Oracle’s popular browser plug-in Java...

VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation

A vulnerability within the VBoxGuest driver allows an attacker to inject memory they control into an arbitrary location they define. This can be used by an attacker to overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently calling NtQueryIntervalProfile on Windows XP SP3 system...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Kolibri Web Server 2.0 - GET (SEH)

Kolibri Web Server 2.0 - GET SEH !/usr/bin/python Exploit Title : Kolibri WebServer 2.0 Get Request SEH Exploit Exploit Author : Revin Hadi S Date : 14/07/2014 Vendor : http://www.senkas.com Version : 2.0 Tested on : Windows XP SP2 Eng, Windows Server 2003 Eng, Win 7 SP1 Eng import socket, sys he...

Kolibri Web Server 2.0 - GET (SEH)

!/usr/bin/python Exploit Title : Kolibri WebServer 2.0 Get Request SEH Exploit Exploit Author : Revin Hadi S Date : 14/07/2014 Vendor : http://www.senkas.com Version : 2.0 Tested on : Windows XP SP2 Eng, Windows Server 2003 Eng, Win 7 SP1 Eng import socket, sys help = """Kolibri WebServer 2.0 Get...

PCMAN FTP 2.07 PORT 命令 缓冲区溢出漏洞（0day）

No description provided by source. Exploit Title: PCMAN FTP 2.07 PORT Command Buffer Overflow Exploit Date: 07 13,2014 Exploit Author: niubl Version: 2.07 Tested on: Windows xp sp3 chinese Email: [email protected] thank for Mahmod Mahajna. i learn from him. 漏洞太多了这个版本软件 import socket as s from sys...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow Exploit

This Metasploit module exploits an stack based buffer overflow on Yokogawa CS3000. The vulnerability exists in the service BKFSimvhfd.exe when using malicious user-controlled data to create logs using functions like vsprintf and memcpy in a insecure way. This Metasploit module has been tested...

Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...

Core FTP LE 2.2 - Heap Overflow PoC

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...

Browser Password Remover - Browser Website Login Password Removal Software

Browser Password Remover is the free software to quickly display and remove all the stored website login passwords from popular browsers. Most of the web browsers allow users to remember passwords and stores them into local database file. This file and all the stored passwords within it can be...

Magix Musik Maker 16 - .mmm Stack Buffer Overflow (without egg-hunter)

No description provided by source. --- My version of exploit... Looks like bug the same as in: http://www.exploit-db.com/exploits/17313/ My exploit does not use egg-hunter, so it must be faster, but i have limited size for payload - 750 bytes 8 Speed Vs Size... --- Title: Magix Musik Maker 16...

Jurpopage 0.2.0 - SQL Injection

No description provided by source. ========================================================= Jurpopage SQL Injection ========================================================= Exploit Title : Jurpopage SQL Injection Date : 24 Noveber 2010 Author : Suddendeath [email protected] Platform/Test...