Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation

Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation / Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In...

Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation

/ Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In fslx.sys 's hook function of "NtQueryValueKey" , it directly write to the buffe...

Kate's Video Toolkit 7.0 Crash

Exploit Title: Kate's Video Toolkit Version 7.0 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Vendor Homepage: http://fakewebcam.com/Free-Video-Toolkit.asp Software Link: http://download.cnet.com/Kate-s-Video-Toolkit/3000-21394-10628194.html Version: 7.0 maybe all versions! Tested on:...

Kate's Video Toolkit Version 7.0 (.wav) - Crash POC

Kate's Video Toolkit version 7.0 crash proof of concept denial of service exploit that creates a malicious WAV file. Exploit Title: Kate's Video Toolkit Version 7.0 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Vendor Homepage: http://fakewebcam.com/Free-Video-Toolkit.asp Software Lin...

Light Audio Mixer 1.0.12 - .wav Crash (PoC)

Light Audio Mixer 1.0.12 - .wav Crash PoC Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

Kate's Video Toolkit 7.0 - '.wav' Crash (PoC)

Exploit Title: Kate's Video Toolkit Version 7.0 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Vendor Homepage: http://fakewebcam.com/Free-Video-Toolkit.asp Software Link: http://download.cnet.com/Kate-s-Video-Toolkit/3000-21394-10628194.html Version: 7.0 maybe all versions! Tested on:...

Light Audio Mixer 1.0.12 - '.wav' Crash (PoC)

Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

MediaCoder .M3U Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'MediaCoder .M3U Buffer Overflow',...

Corel PDF Fusion Stack Buffer Overflow Vulnerability

This Metasploit module exploits a stack-based buffer overflow vulnerability in version 1.11 of Corel PDF Fusion. The vulnerability exists while handling a XPS file with long entry names. In order for the payload to be executed, an attacker must convince the target user to open a specially crafted...

Corel PDF Fusion Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' class Metasploit3 'Corel PDF Fusion...

ERS Viewer 2013 ERS File Handling Buffer Overflow

Exploit for windows platform in category local exploits require 'msf/core' class Metasploit3 "ERS Viewer 2013 ERS File Handling Buffer Overflow", 'Description' = %q This module exploits a buffer overflow vulnerability found in ERS Viewer 2013. The vulnerability exists in the module ermapperu.dll,...

ERS Viewer 2013 ERS File Handling Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2013 E...

Corel PDF Fusion Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 1.11 of Corel PDF Fusion. The vulnerability exists while handling a XPS file with long entry names. In order for the payload to be executed, an attacker must convince the target user to open a specially crafted XPS file...

Realtek Sound Manager AvRack - '.wav' Crash (PoC)

!/usr/bin/python Title: Realtek Sound Manager AvRack - Crach Poc version: all versions link: http://www.realtek.com.tw/ Platform: Windows XP sp3 Author: Asesino04 Blog : http://asesino04.blogspot.com/ junk="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"...

Realtek Sound Manager AvRack - .wav Crash (PoC)

Realtek Sound Manager AvRack - .wav Crash PoC !/usr/bin/python Title: Realtek Sound Manager AvRack - Crach Poc version: all versions link: http://www.realtek.com.tw/ Platform: Windows XP sp3 Author: Asesino04 Blog : http://asesino04.blogspot.com/...

Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation

Exploit for windows platform in category local exploits require 'msf/core' require 'rex' require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/process' class Metasploit3 'Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation', 'Description' = %q...

Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

PCMAN FTP Server Post-Authentication STOR Command Stack Buffer Overflow

This module exploits a buffer overflow vulnerability found in the STOR command of the PCMAN FTP v2.07 Server when the "/../" parameters are also sent to the server. Please note authentication is required in order to trigger the vulnerability. The overflowing string will also be seen on the FTP...

AudioCoder 0.8.22 - '.lst' Direct RETN Buffer Overflow

!/usr/bin/python Title: AudioCoder 0.8.22 .lst - Direct Retn Buffer OverFlow version: 0.8.22 build 5506 built on May 27 2013, 00:22:49 link: http://www.downloadbestsoft-mirror2.com/programs/AudioCoder-0.8.22.5506.exe Platform: Windows XP sp3 Date: June 23th, 2013 Author: onying @onyiing Blog :...

Telnet-Ftp Service Server 1.0 Directory Traversal

Telnet-Ftp Service Server version 1.0 suffers from a directory traversal vulnerability. Exploit Title: Telnet-Ftp Service Server v1.0 Directory Traversal Vulnerability Date Published: 2013/6/18 Exploit Author: Chako Software Link: http://telnet-ftp-server.en.softonic.com/ Version: v1.0 Build 1.21...