A-PDF All To MP3 Coverter 1.1.0 Universal Exploit

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

Microsoft Mspaint - .bmp Crash (PoC)

Microsoft Mspaint - .bmp Crash PoC Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15034.zip...

Chalk Creek Media Player 1.0.7 .mp3 and .wma Denial of Service

Exploit for windows platform in category dos / poc ============================================================== Chalk Creek Media Player 1.0.7 .mp3 and .wma Denial of Service ============================================================== Exploit Title: Chalk Creek Media Player 1.0.7 .mp3 and .w...

DJ Studio Pro Version 8.1.3.2.1 SEH Exploit

Exploit for windows platform in category local exploits =========================================== DJ Studio Pro Version 8.1.3.2.1 SEH Exploit =========================================== DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom,...

A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit

Exploit for windows platform in category local exploits ============================================================== A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit ============================================================== !/usr/bin/python Exploit Title: A-PDF All to MP3...

BACnet OPC Client Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= BACnet OPC Client Buffer Overflow Exploit ========================================= !/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010...

A-PDF All to MP3 Converter 1.1.0 - Universal Local (SEH)

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

Chalk Creek Media Player 1.0.7 Denial Of Service

Exploit Title: Chalk Creek Media Player 1.0.7 .mp3 and .wma DOS Date: September 16 2010 Author: Carlos Mario Penagos Hollmann Software Link: http://download.cnet.com/3001-21394-10526196.html?spi=a1e3adfe2f3af811074a43111c901f6c Version: 1.0.7 Tested on: Windows xp sp3 running on VMware Fusion 3.1...

BACnet OPC Client Buffer Overflow

!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...

Digital Music Pad Version 8.2.3.3.4 Stack Buffer Overflow

This module exploits a buffer overflow in Digital Music Pad Version 8.2.3.3.4 When opening a malicious pls file with the Digital Music Pad, a remote attacker could overflow a buffer and execute arbitrary code. Module Options msf use exploit/windows/fileformat/digital/musicpadpls msf...

Honestech VHS To DVD 3.0.30 Deluxe Buffer Overflow

!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...

Honestech VHS to DVD <= 3.0.30 Deluxe Local Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ================================================================= Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n...

BACnet OPC Client Buffer Overflow Exploit

!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...

Honestech VHS to DVD 3.0.30 Deluxe - Local Buffer Overflow (SEH)

Honestech VHS to DVD 3.0.30 Deluxe - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n...

QuickShare 1.0 Directory Traversal

------------------------------------------------------------------------ Software................QuickShare 1.0 Vulnerability...........Directory Traversal Download................http://houbysoft.com/ Release Date............9/15/2010 Tested On...............Windows XP...

CVE-2010-3200 : Microsoft Word 2003 MSO Null Pointer Dereference Vulnerability

Advisory Microsoft Word 2003 MSO Null Pointer Dereference Vulnerability CVE: 2010-3200 Version Word 2003 SP3 11.8326.11.8324 tested on windows XP SP2/SP3 Details : A null pointer dereference vulnerability has been noticed in MS Word.The exception results in the MSO.dll library which fails to hand...

Microsoft Security Bulletin MS10-067 - Important Vulnerability in WordPad Text Converters Could Allow Remote Code Execution &#40;2259922&#41;

Microsoft Security Bulletin MS10-067 - Important Vulnerability in WordPad Text Converters Could Allow Remote Code Execution 2259922 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Window...

Honestech VHS to DVD 3.0.30 Deluxe - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...

BACnet OPC Client - Local Buffer Overflow (1)

!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...

BACnet OPC Client - Local Buffer Overflow (1)

BACnet OPC Client - Local Buffer Overflow 1 !/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also...