Batch Audio Converter Lite Edition <= v1.0.0.0 Stack Buffer Overflow

Exploit for windows platform in category local exploits ========================================================================== Batch Audio Converter Lite Edition = v1.0.0.0 Stack Buffer Overflow SEH ========================================================================== Software Link:...

Winamp v5.572 local BOF exploit (EIP & SEH DEP Bypass)

Exploit for windows platform in category local exploits ====================================================== Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass ====================================================== !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass...

Havij 1.10 - Persistent Cross-Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon [email protected] ------------- Vulnerability...

Batch Audio Converter Lite Edition 1.0.0.0 - Local Stack Buffer Overflow (SEH)

Batch Audio Converter Lite Edition 1.0.0.0 - Local Stack Buffer Overflow SEH Software Link: http://www.freesoftwaretoolbox.com/files/batchaudiosetup.exe Tested on: Windows XP SP2 Type of Vuln: SEH Code : bacon-exploit.py Greetz: Otoy, Postnix, Jasakom Community, Kilurah, Gesang, dan wedus-wedus...

File Sharing Wizard 1.5.0 - Remote Overflow (SEH)

!/usr/bin/python print "\n" print " Team Hackers Garage " print " www.garage4hackers.com " print " " print " File Sharing Wizard Version 1.5.0 " print " Remote Command Execution " print " Author: b0nd " print " [email protected] " print " " print " Greetz to: The Hackers Garage Family " print ...

Rosoft Audio Converter 4.4.4 Buffer Overflow

Exploit for php platform in category web applications ============================================ Rosoft Audio Converter 4.4.4 Buffer Overflow ============================================ Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link:...

Rosoft Audio Converter 4.4.4 Buffer Overflow

Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link: http://www.rosoftengineering.com/freeware/RosoftAudioConverterFree.aspx Version: 4.4.4 Tested on: Windows XP SP3 / Windows 7 Home change shellcode for Windows 7 Instructions: create...

Rosoft Audio Converter 4.4.4 - Local Buffer Overflow

Rosoft Audio Converter 4.4.4 - Local Buffer Overflow Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link: http://www.rosoftengineering.com/freeware/RosoftAudioConverterFree.aspx Version: 4.4.4 Tested on: Windows XP SP3 / Windows 7 Home chang...

Rosoft Audio Converter 4.4.4 - Local Buffer Overflow

Exploit Title: Rosoft Audio Converter 4.4.4 Buffer Overflow Date: June 14, 2010 Author: Blake Software Link: http://www.rosoftengineering.com/freeware/RosoftAudioConverterFree.aspx Version: 4.4.4 Tested on: Windows XP SP3 / Windows 7 Home change shellcode for Windows 7 Instructions: create...

Microsoft Visual Studio Mdmask32.ocx ActiveX Buffer Overflow

This module exploits a stack buffer overflow in Microsoft's Visual Studio 6.0. When passing a specially crafted string to the Mask parameter of the Mdmask32.ocx ActiveX Control, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

Attackers Exploiting Windows Help Center Flaw

Researchers have found evidence that attackers are exploiting the vulnerability in the Windows Help and Support Center that was at the center of so much controversy last week. The flaw, which is in the protocol handler related to the Microsoft Windows Help and Support Center, was disclosed late...

CVE-2010-2265

Cross-site scripting XSS vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE:...

Input validation

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist fromHCP option and execute arbitrary commands v...

Cross site scripting

Cross-site scripting XSS vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE:...

Windows Help and Support Center -FromHCP URL whitelist bypass

Added: 06/15/2010 CVE: CVE-2010-1885 BID: 40725 OSVDB: 65264 Background The Microsoft Windows Help and Support Center is a resource in Microsoft Windows operating systems for online help, support, tools, how-to articles, and other resources. Problem A vulnerability in Windows Help and Support...

Winplot 2010 Buffer Overflow PoC

Exploit for windows platform in category dos / poc ================================ Winplot 2010 Buffer Overflow PoC ================================ / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided...

SasCam 2.6.5 - Remote HTTP Server Crash

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! Also the free software programs provided by fl0 fl0w may be freely distributed and that the disclaimer below is always attached to it. The programs are provided as is without...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)

$Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Windows Help and Support Center -FromHCP URL whitelist bypass

Added: 06/15/2010 CVE: CVE-2010-1885 BID: 40725 OSVDB: 65264 Background The Microsoft Windows Help and Support Center is a resource in Microsoft Windows operating systems for online help, support, tools, how-to articles, and other resources. Problem A vulnerability in Windows Help and Support...

Winplot 2010 - Buffer Overflow (PoC)

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...