1237 matches found
MS Word - Record Parsing Buffer Overflow MS09-027 (meta)
No description provided by source. $Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb...
Windows Movie Maker 2.1.4026.0 - (.wav) Crash PoC
No description provided by source. Exploit Title: Windows Movie Maker Version 2.1.4026.0 .wav - Crash POC Date: 16-07-2013 Exploit Author: ariarat Vendor Homepage: http://www.microsoft.com Software Link: included in windows xp sp2 and sp3 Version: 2.1.4026.0 Tested on: Windows XP sp3 CVE :...
Digital Music Pad 8.2.3.3.4 - SEH overflow Metasploit Module
No description provided by source. Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Microsoft Windows XP/2003 - RPCSS Service Isolation Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34443/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file...
WINMOD 1.4 - (.lst) Universal Buffer Overflow Exploit (SEH) (2)
No description provided by source. !/usr/bin/python Exploit : WINMOD 1.4 .lst Universal Buffer Overflow Exploit SEH Tested on : Xp sp2 fr Original exploit : http://www.milw0rm.com/exploits/9221 By : DzGirl Greets to : hisok4 even if he doesn't know me & all friends win32exec - EXITFUNC=seh CMD=ca...
Microsoft Services MS06-066 nwwks.dll
No description provided by source. $Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (2)
No description provided by source. exploit.py Beatport Player 1.0.0.283 .M3U File Local Stack Overflow Exploit By: Encrypt3d.M!nd Tested on : Windows xp sp2 chars = \x41 1232 ns = \xEB\x06\x90\x90 sh = \x35\x2F\xD1\x72 nops = \x90 20 win32exec - EXITFUNC=thread CMD=calc.exe Size=351...
DESlock+ <= 3.2.6 DLMFDISK.sys local kernel ring0 SYSTEM Exploit
No description provided by source. / deslock-pown-v2.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 SYSTEM exploit by mu-b - Wed 26 Dec 2007 - Tested on: DLMFDISK.sys 1.2.0.27 - Microsoft Windows 2003 SP2 - Microsoft Windows XP SP2 Note: create a mountable filesyste...
Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers...
MS Internet Explorer GDI+ - Proof of Concept (MS08-052)
No description provided by source. html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180...
Destiny Media Player 1.61 - PLS .M3U Buffer Overflow
No description provided by source. $Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit
No description provided by source. 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb victimhost victimport Defau...
Microsoft Windows XP/VISTA/2003/2008 - WMI Service Isolation Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...
IE wshom.ocx ActiveX Control Remote Code Execution
No description provided by source. IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 html p align=leftbfont face=Segoe...
Remote Help HTTP 0.0.7 GET Request Format String Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38875/info Remote Help is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the nature of this issue arbitra...
VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested...
GOM player 2.1.9 - Local crash PoC
No description provided by source. !usr/bin/perl Exploits title :GOM player V 2.1.9 Local crash poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://en.kioskea.net/telecharger/download-2141-gom-player tested on :win xp sp2 GOM player V 2.1.9 $file=SarBoT511.asx; $boom=A x 2000;...
Quick Player 1.3 Unicode SEH Exploit
No description provided by source. Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable...
Winzip 15.0 WZFLDVW.OCX Text Property Denial of Service
No description provided by source. Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter :...