Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow

This module exploits a vulnerability found in Lattice Semiconductor PAC-Designer 6.21. As a .pac file, when supplying a long string of data to the 'value' field under the 'SymbolicSchematicData' tag, it is possible to cause a memory corruption on the stack, which results in arbitrary code executi...

Multimedia Builder 4.9.8 Denial Of Service

Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady Mohamed Email : [email protected] Website...

MultiMedia Builder 4.9.8 - '.mef' Denial of Service

Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady Mohamed Email : [email protected] Website...

MultiMedia Builder 4.9.8 - .mef Denial of Service

MultiMedia Builder 4.9.8 - .mef Denial of Service Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady...

Apple QuickTime TeXML Style Element Stack Buffer Overflow

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...

PHP CGI Query String Parameters Command Execution

Added: 05/15/2012 CVE: CVE-2012-1823 BID: 53388 OSVDB: 81633 Background PHP is a widely used general-purpose scripting language that is especially suited for Web development. Problem When configured as a CGI script aka php-cgi, PHP does not properly handle query string parameters which are passed...

Multimedia Builder 4.9.8 Malicious mef Crash

Exploit for windows platform in category dos / poc Multimedia Builder 4.9.8 Malicious mef File Denial of service =================================================================================== Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service Author: Ahmed Elhady...

Mozilla Firefox 8/9 - 'AttributeChildRemoved()' Use-After-Free (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox 8/9...

Firefox 8/9 AttributeChildRemoved() Use-After-Free

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

RealVNC 4.1.04.1.1 - Authentication Bypass

RealVNC 4.1.04.1.1 - Authentication Bypass Exploit Title: RealVNC 4.1.0 and 4.1.1 Authentication Bypass Exploit Date: 2012-05-13 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1.0 and 4.1.1 Tested on: Windows XP CVE: CVE-2006-2369 Requires vncviewer installed Basic port of hdmoore/msf2...

RealVNC 4.1.0/4.1.1 - Authentication Bypass

Exploit Title: RealVNC 4.1.0 and 4.1.1 Authentication Bypass Exploit Date: 2012-05-13 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1.0 and 4.1.1 Tested on: Windows XP CVE: CVE-2006-2369 Requires vncviewer installed Basic port of hdmoore/msf2 perl version to python for fun and profit...

AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow

AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/...

MS11-013: Vulnerabilities in Kerberos could allow elevation of privilege

Resolves a vulnerability that could allow for the elevation of privilege on a computer that is running Windows XP, Windows Server 2003, Windows 7 or Windows Server 2008 R2.IntroductionMicrosoft has released security bulletin MS11-013. To view the complete security bulletin, visit one of the...

PHP 5.4.3 (Windows x86 Polish) - Code Execution

// Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polish =================== offset-brute.html...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

Cisco Adaptive Security Appliance is prone to ActiveX control remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Firefox 7/8 (<= 8.0.1) nsSVGValue Out-of-Bounds Access Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Guitar Pro 6.1.1 r10791 - .gpx Crash (PoC)

Guitar Pro 6.1.1 r10791 - .gpx Crash PoC !/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into the program...

Guitar Pro 6.1.1 r10791 Denial Of Service

!/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into the program ends up with crash, but place of crash an...

CORE-2011-1123: Windows Kernel ReadLayoutFile Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Windows Kernel ReadLayoutFile Heap Overflow 1. Advisory Information Title: Windows Kernel ReadLayoutFile Heap Overflow Advisory ID: CORE-2011-1123 Advisory URL:...

CVE-2012-1848

CVE-2012-1848 affects win32k.sys kernel-mode drivers across multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, Windows 7 SP1, and Windows 8 Consumer Preview). The underlying issue is improper handling of user-mode input passed to kernel mode, which enabl...