HikVision Security Systems - Activex Buffer Overflow

!/usr/bin/env python The exploit is a part of EAST Framework - use only under the license agreement specified in LICENSE.txt in your EAST Framework distribution visit eastfw.com eastexploits.com for more info import sys import re import os import socket import random import string from struct...

Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

/ Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows Server 2003 SP2 Itanium-based Systems Windo...

Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Softwa...

Zortam MP3 Media Studio 21.15 Privilege Escalation

Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Software Link: http://www.zortam.com/download.html...

Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Software Link: http://www.zortam.com/download.html...

AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege Date: 22/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://anydesk.com Software Link:...

PHP 5.0.0 - tidy_parse_file() Local Buffer Overflow

PHP 5.0.0 - tidyparsefile Local Buffer Overflow...

PHP 5.0.0 - 'tidy_parse_file()' Local Buffer Overflow

...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link: https://eu.battle.net/account/download/ Version: Version 1.5.0.7963 Tested...

Icecream Apps - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

Design/Logic Flaw

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378

The CVE affects HP XP P9000 Command View Advanced Edition Software (before 8.4.1-00) and XP7 Command View Advanced Edition Suite (before 8.4.1-00). Vulnerable components include Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD)...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

Win32k Forms Creation Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. There is a denial-of-service vulnerability in Win32k form creation, which occurs when a parameter in a system service function in Win32k.sys fails to be correctly checked, causing the local kernel to deny service when the user runs...

win32k.sys SfnOUTSTRING Local Kernel Denial of Service Vulnerability

Win32k.sys is a multi-user management driver file for Windows XP. A local kernel denial of service vulnerability exists in the win32k.sys SfnOUTSTRING function. An attacker can exploit the vulnerability to launch a denial of service attack, resulting in a blue screen and reboot of the system. In...

Philips Xper-IM Connect Vulnerabilities

OVERVIEW Independent researchers Mike Ahmadi of Synopsys and Billy Rios of Whitescope LLC, in collaboration with Philips, have identified numerous vulnerabilities with an automated software composition analysis tool in the Philips Xper-IM Connect system running on Windows XP. Philips reports that...

Microsoft Windows Authenticated User Code Execution

This module uses a valid administrator username and password or password hash to execute an arbitrary payload. This module is similar to the "psexec" utility provided by SysInternals. This module is now able to clean up after itself. The service created by this tool uses a randomly chosen name an...

Core FTP Le 2.2 Buffer Overflow

!/usr/bin/env python ''' Exploit Title: Core FTP Le v2.2 - Proxy Password Buffer Overflow Date: 2016-7-11 Author: s0nk3y Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows XP CVE: N/A Type: Buffer Overflow + Proof of concept Click options Global Settings - Proxy ...