Target Longlife Media Player 2.0.2.0 Crash Proof Of Concept

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3864 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-055 Microsof...

freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...

MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-055 Microsof...

freeFTPd 1.0.10 PASS Command SEH Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'freeFTPd 1.0.10 PASS Command SEH...

Office, SharePoint Patches Await September Patch Tuesday

Today’s monthly advance notification of Microsoft’s upcoming security bulletin release on Tuesday includes a number of critical Office patches that have experts worried. Of particular concern are remote code execution vulnerabilities in Outlook 2007 and 2010 that can be exploited by merely...

GOMPlayer 2.2.53.5169 Crash Proof Of Concept

Exploit Title: GOMPlayer Version 2.2.53.5169 .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html?part=dl-GOMMediaP&subj=dl&tag=button Version: 2.2.53.5169 Probably old version of software too Vendor Homepage:...

KingView 6.53 Active-X File Copy

KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlled share to the target or from the target to an attacker...

Dreammail V4. 6. 9. 2 XSS exploit-vulnerability warning-the black bar safety net

For version: DreamMail 4.6.9.2 Test environment: windows xp sp3 python version: 2.6 Test email: 126.com ! Copy code -- coding:UTF-8 -- @small five righteousness http://www.cnblogs.com/xiaowuyi import smtplib, urllib2 payload = "'"' def sendMailtoemail, smtpsrv, username, password: msg = "From:...

Symantec Endpoint Protection 12.1.2015.2015 Uninstall

Hi list, Description: --------------------------------------------- A weakness has been revealed on SEP installation that allows user to uninstall this product without previous knowledge of the un-installation password. Affected version: 12.1.2015.2015 Affected OS: Windows XP Details:...

KingView 6.53 - Insecure ActiveX Control (SuperGrid)

Exploit for windows platform in category local exploits KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx This proof of concept will copy any arbritrary file from one location to a second location. A malicious user may be able to use this to copy a file from an attacker controlle...

jetAudio 8.0.16.2000 Plus VX Crash Proof Of Concept

Exploit Title: jetAudio Version 8.0.16.2000 Plus VX - .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://www.jetaudio.com/download/ Version: 8.0.16.2000 Probably old version of software and the LATEST version too Vendor Homepage: http://www.jetaudio.com Tested on:...

KingView 6.53 Active-X File Overwrite / Creation

arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1...

KingView 6.53 - ActiveX Remote File Creation / Overwrite (KChartXY)

Exploit for windows platform in category local exploits arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1 0day.today 2018-03-13...

HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution

This Metasploit module exploits a vulnerability on the lrFileIOService ActiveX, as installed with HP LoadRunner 11.50. The vulnerability exists in the WriteFileString method, which allow the user to write arbitrary files. It's abused to drop a payload embedded in a dll, which is later loaded...

KingView 6.53 - KChartXY ActiveX File Creation Overwrite

KingView 6.53 - KChartXY ActiveX File Creation Overwrite arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1...

HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)

Exploit Title: GOMPlayer Version 2.2.53.5169 .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html?part=dl-GOMMediaP&subj=dl&tag=button Version: 2.2.53.5169 Probably old version of software too Vendor Homepage:...

jetAudio 8.0.16.2000 Plus VX - '.wav' Crash (PoC)

Exploit Title: jetAudio Version 8.0.16.2000 Plus VX - .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://www.jetaudio.com/download/ Version: 8.0.16.2000 Probably old version of software and the LATEST version too Vendor Homepage: http://www.jetaudio.com Tested on:...