Beetel Connection Manager 'NetConfig.ini'文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 63414 Beetel Connection Manager是一套3G无线上网卡的连接管理器。 Beetel Connection Manager验证 NetConfig.ini 文件不正确时可触发缓冲区溢出，这可使上下文独立的攻击者造成应用崩溃，停止响应，也可能执行任意代码。 0 beetel Beetel Connection Manager PCWBTLINDV1.0.0B04 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Castripper 2.50.70 - (.pls) DEP Exploit

Exploit for windows platform in category local exploits Castripper 2.50.70 .pls exploit Stack buffer overflow/DEP bypass Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ email protected All ROP gadgets are from the APP's DLLs except for th...

Castripper 2.50.70 - .pls DEP Bypass

Castripper 2.50.70 - .pls DEP Bypass Castripper 2.50.70 .pls exploit Stack buffer overflow/DEP bypass Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ [email protected] All ROP gadgets are from the APP's DLLs except for the hardcoded...

Castripper 2.50.70 - '.pls' DEP Bypass

Castripper 2.50.70 .pls exploit Stack buffer overflow/DEP bypass Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 DEP:OptOut Author: Lucfer ------ [email protected] All ROP gadgets are from the APP's DLLs except for the hardcoded SetProcessDEPPolicy address import struct f =...

GOM Player 2.2.53.5169 - .reg Local Buffer Overflow (SEH)

GOM Player 2.2.53.5169 - .reg Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: GOM Player 2.2.53.5169 - SEH Buffer Overflow .reg Date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: GOM Player 2.2.53.5169 Vendor Site:...

GOM Player 2.2.53.5169 - '.reg' Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: GOM Player 2.2.53.5169 - SEH Buffer Overflow .reg Date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: GOM Player 2.2.53.5169 Vendor Site: http://player.gomlab.com/eng/ Vulnerable Software Link:...

Steinberg MyMp3PRO 5.0 SEH Buffer Overflow

!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 SEH Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1056...

Microsoft Windows NDPROXY Local SYSTEM Privilege Escalation

NDPROXY Local SYSTEM privilege escalation http://www.offensive-security.com Tested on Windows XP SP3 http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/ Original crash ... null pointer dereference Access violation - code c0000005 !!! second chance !!! 00000038 ??...

Hex Workshop 6.7 DLL Hijack

/ Exploit Title: Hex Workshop v 6.7 mfc100trk.dll - DLL Hijacking Vulnerability // Date: 29.11.2013 // Exploit Author: Akin Tosunlar / Ozgur Yurdusev // Software Link: http://www.download.com/Hex-Workshop/3000-23524-10004918.html?part=dl-HexWorksh&subj=dl&tag=button // Version: 6.7 Probably old...

Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP)

Steinberg MyMp3PRO 5.0 - Local Buffer Overflow SEH DEP Bypass + ROP !/usr/bin/ruby print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 eip=0x7C86467B.pack'V'7C86467B FFE4 JMP E...

Steinberg MyMp3PRO v5.0 DEP Bypass with ROP

Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 DEP Bypass with ROP Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author:...

Steinberg MyMp3PRO v5.0 Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metac...

Steinberg MyMp3PRO v5.0 SEH Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 SEH Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author:...

Notepad++ Plugin Notepad 1.5 - Local Overflow

Notepad++ Plugin Notepad 1.5 - Local Overflow Exploit Title: Notepad++ - Notepad plugin local exploit Google Dork: Date: 2013-12-01 Exploit Author: Sun Junwen Vendor Homepage: http://notepad-plus-plus.org/ Software Link: http://notepad-plus-plus.org/download/ Version: Notepad ++ 6.3.2 with Notepa...

Notepad++ Plugin Notepad 1.5 - Local Overflow

Exploit Title: Notepad++ - Notepad plugin local exploit Google Dork: Date: 2013-12-01 Exploit Author: Sun Junwen Vendor Homepage: http://notepad-plus-plus.org/ Software Link: http://notepad-plus-plus.org/download/ Version: Notepad ++ 6.3.2 with Notepad plugin 1.5 and Explorer plugin 1.8.2 Tested...

ABB MicroSCADA wserver.exe Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ABB MicroSCADA wserver.exe Remote Code Execution', 'Description' = %q This module exploits a remote stack buffer overflow vulnerabili...

MS14-002 Microsoft Windows ndproxy.sys Local Privilege Escalation

This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited in the wild in November, 2013. The vulnerability exists while processing an IO Control Code 0x8fff23c8 or 0x8fff23cc, where user provided input is used to access an array unsafely, and...

Total Video Player 1.3.1 - Settings.ini Local Buffer Overflow (SEH)

Total Video Player 1.3.1 - Settings.ini Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1...

Light Alloy 4.7.3 (.m3u) - SEH Buffer Overflow (Unicode)

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: Light Alloy 4.7.3 .m3u - SEH Buffer Overflow Unicode Date: 11-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Light Alloy v4.7.3 Vendor Site: http://www.light-alloy.ru/ Vulnerab...

Light Alloy 4.7.3 Buffer Overflow

!/usr/bin/perl Exploit Title: Light Alloy 4.7.3 .m3u - SEH Buffer Overflow Unicode Date: 11-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Light Alloy v4.7.3 Vendor Site: http://www.light-alloy.ru/ Vulnerable Software Link:...