Ericom AccessNow Server Buffer Overflow

This module exploits a stack based buffer overflow in Ericom AccessNow Server. The vulnerability is due to an insecure usage of vsprintf with user controlled data, which can be triggered with a malformed HTTP request. This module has been tested successfully with Ericom AccessNow Server 2.4.0.2 o...

Easy File Sharing FTP Server 3.5 Buffer Overflow

!/usr/bin/env python Exploit Title: Easy File Sharing FTP Server 3.5 stack buffer overflow Date: 27 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vulnerability discovered by: h07 CVE: CVE-2006-3952 OSVDB: 27646 Vendor Homepage: http://www.efssoft.com Software Link:...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

This module exploits a stack based buffer overflow on Yokogawa CS3000. The vulnerability exists in the service BKFSimvhfd.exe when using malicious user-controlled data to create logs using functions like vsprintf and memcpy in an insecure way. This module has been tested successfully on Yokogawa...

CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9...

AoA DVD Creator 2.6.2 - ActiveX

nseh="\xEB\x06\x90\x90"; seh="\x1f\x5c\x03\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...

AoA DVD Creator 2.6.2 - ActiveX

AoA DVD Creator 2.6.2 - ActiveX nseh="\xEB\x06\x90\x90"; seh="\x1f\x5c\x03\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...

AoA Audio Extractor Basic 2.3.7 - ActiveX

nse="\xEB\x06\xff\xff"; seh="\x58\xE4\x04\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow (SEH Unicode)

!/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: CyberLink Power2Go 9 Essential 9.0.1002.0 Vendor Site: http://www.cyberlink.com...

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow (SEH Unicode)

CyberLink Power2Go Essential 9.0.1002.0 - Registry Buffer Overflow SEH Unicode !/usr/bin/perl Exploit Title: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow Discovery date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version:...

Adobe Flash Player - Shader Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Shader Buffer Overflow", 'Description' = %q This module exploits a buffer overflow vulnerability in Adobe Flash...

VLC Player 2.1.3 Memory Corruption

Exploit Title: VLCplayer memory corruption in latest Version 2.1.3 Date: 2014/05/07 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.videolan.org Software Link:...

Adobe Flash Player - Integer Underflow Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Integer Underflow Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in the...

Adobe Flash Player - Type Confusion Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Type Confusion Remote Code Execution", 'Description' = %q This module exploits a type confusion vulnerability foun...

Adobe Flash Player Type Confusion Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Type Confusion Remote Code Execution", 'Description' = %q This module exploits a type confusion vulnerability foun...

Wireshark 1.8.12/1.10.5 - wiretap/mpeg.c Stack Buffer Overflow (Metasploit)

Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow Date: 24/04/2014 Exploit Author: j0sm1 Vendor Homepage: www.wireshark.org Software Link: http://wireshark.askapache.com/download/win32/all-versions/ Version: 'Wireshark %q This module triggers a stack buffer overflow in...

Kolibri 2.0 Stack Buffer Overflow

!/usr/bin/python Exploit Title: Kolibri GET request Stack buffer Overflow Date: 25 April 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.senkas.com/kolibri/download.php Version: Kolibri 2.0 Tested on: Windows XP SP3, Spanish Thanks:To my wife...

EagleGet 1.1.8.1 - Denial of Service

Exploit Title: EagleGet 1.1.8.1 DoS Exploit Date: 03 April 2014 Exploit Author: Interference Security Vendor Homepage: http://www.eagleget.com/ Software Link: http://www.eagleget.com/download/ Version: 1.1.8.1 Tested on: Microsoft Windows XP SP3 print " Crash PoC for EagleGet 1.1.8.1 tested on...

AudioCoder 0.8.29 Memory Corruption

Exploit Title: AudioCoder-0.8.29 Memory Corruption to Code executionSEH Author: sajith version: AudioCoder-0.8.29 vulnerable app link: http://www.mediacoderhq.com/getfile.htm?site=dl.mediacoderhq.com&file=AudioCoder-0.8.29.exe Tested in windows Xp sp3,english import struct rawinput"Letz start...

Haihaisoft Universal Player 1.5.8 - .m3u .pls .asx Buffer Overflow (SEH)

Haihaisoft Universal Player 1.5.8 - .m3u .pls .asx Buffer Overflow SEH ----------------------------------------------------------------------------- Exploit Title: Haihaisoft Universal Player 1.5.8 - Buffer Overflow SEH Date: Mar 25 2014 Exploit Author: Gabor Seljan Software Link:...

Haihaisoft HUPlayer 1.0.4.8 - '.m3u' / '.pls' / '.asx' Buffer Overflow (SEH)

----------------------------------------------------------------------------- Exploit Title: Haihaisoft HUPlayer 1.0.4.8 - Buffer Overflow SEH Date: Mar 25 2014 Exploit Author: Gabor Seljan Software Link: http://www.haihaisoft.com/huplayer.aspx Version: 1.0.4.8 Tested on: Windows XP SP3...