Hyplay 1.2.326.1 - '.asx' Local Denial of Service Crash (PoC)

/usr/bin/perl Title: Hyplay 1.2.326.1 .asx Local DoS crash PoC Download: http://www.hyplay.com/download.asp Written/Discovered by: xsploited Security Tested on Windows XP SP2 URL: http://x-sploited.com/ Shoutz: kAoTiX, drizzle, JeremyBrown, BreTT, Deca A bug exists in the way Hyplay processes...

HP LoadRunner 9.0 - ActiveX AddFolder Buffer Overflow (Metasploit)

$Id: hploadrunneraddfolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Yahoo! Messenger - 'YVerInfo.dll' ActiveX Control Buffer Overflow (Metasploit)

$Id: yahoomessengerfvcom.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

AVCON H323Call - Local Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON H323Call Buffer Overflow Date: 5/9/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Versions: 4.6.8.7 | 4.6.4.0 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Download: http://meeting.bjhr.gov.cn/avcon/avcon.exe...

Microsoft Paint Integer Overflow Vulnerability (DoS) MS10-005

Exploit for windows platform in category dos / poc ============================================================= Microsoft Paint Integer Overflow Vulnerability DoS MS10-005 ============================================================= Date: 2010-05-04 Version: 5.1.2600.2180 Tested on: Windows XP...

Microsoft Paint - Integer Overflow (Denial of Service) (MS10-005)

Date: 2010-05-04 Version: 5.1.2600.2180 Tested on: Windows XP SP2 Exploit-DB Notes: Tested under 32-bit Windows XP SP3 ENG, MS Paint crashes. However, please note this exploit might not actually be related to MS10-005. Thanks to Yaniv Miron. !/usr/bin/perl $PoC =...

Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

!/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 17/04/2010 Tested on WinXPSP2/SP3 englis...

Microsoft Windows MP3音频解码器栈溢出漏洞（MS10-026）

BUGTRAQ ID: 39303 CVE ID: CVE-2010-0480 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中所使用的MP3编码解码器处理AVI媒体文件的方式中存在栈溢出漏洞。如果用户打开包含MP3音频流的特制的AVI文件，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP...

WinSoftMagic Photo Editor .PNG Buffer Overflow

/\ WinSoftMagic Photo Editor .PNG File Buffer Overflow This sploit runs calc.exe or bind to port 4444. Tested On Win XP SP2 & Win VisTa 2008 Code & Discovered By: eidelweiss This Made For Educational purpose only Author will not responsible for any damage Thanks: JosS,r0073r & 0x1D,exploit-db,sp3...

Free MP3 CD Ripper 2.6 - .wav Local Overflow

Free MP3 CD Ripper 2.6 - .wav Local Overflow Exploit Title: Free MP3 CD Ripper 2.6 0 day Date: 30/03/2010 Author: Richard leahy Reference: http://www.exploit-db.com/exploits/11975/ Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows X...

Free MP3 CD Ripper 2.6 0day

Exploit for windows platform in category local exploits =========================== Free MP3 CD Ripper 2.6 0day =========================== Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 category: loc...

Free MP3 CD Ripper 2.6 - .wav (PoC)

Free MP3 CD Ripper 2.6 - .wav PoC Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file -...

Free MP3 CD Ripper 2.6 - '.wav' (PoC)

Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file - wav converter - wav to mp3 use you...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7. Shellcode exploit for windows platform // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com//...

Remote Help HTTP 0.0.7 - GET Format String Denial of Service

Remote Help HTTP 0.0.7 - GET Format String Denial of Service source: https://www.securityfocus.com/bid/38875/info Remote Help is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the...

Yahoo Player v1.0 (.m3u) Buffer Overflow Exploit (direct EIP overwrite)

Exploit for windows platform in category local exploits ======================================================================= Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite ======================================================================= Title: Yahoo Player v1.0 .m3u...

Yahoo Player 1.0 - '.m3u' Local Buffer Overflow

Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file="crash.m3u"; my $junkA="A"x2080; my $eip=pack'V',0x7c80ae31; eip my $junkC="C"x12;...

Flare <= 0.6 Local Heap Overflow DoS

Exploit for multiple platform in category dos / poc ==================================== Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

No description provided by source. Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A...