Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk @fdiskyou e-mail: fdiskyou at...

FreeTrim MP3 2.2.3 - Denial of Service Vulnerability

No description provided by source. Exploit Title: FreeTrim MP3 Local Crash PoC Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe Tested on: Win XP SP3 Date: 02-12-2010 Author: h1ch4m Email: [email protected] sahra dyalna o jazayrya khotna my $file= 1.cda; my $junk = \x41 x 100;...

Quickzip 5.1.8.1 - Denial of Service Vulnerability

No description provided by source. Exploit Title: Quickzip 5.1.8.1 Denial of Service Vulnerability Date: 2010/11/02 Author: moigai e-mail: [email protected] Version: 5.1.8.1 Tested on: Windows XP SP3 En VM Greetz to: Yoji my $file = boom.zip; my $localHeader = \x50\x4b\x03\x04 . Local file head...

Hanso Player 1.4.0 - (.m3u) Denial of Service Vulnerability

No description provided by source. =================================================== Hanso Player Version 1.4.0 .m3u Denial of Service Vulnerability =================================================== .....................X-SHADOW ; ThBa7 ; KloofQ8 ; LeGEnD ; abada...

FreeAmp 2.0.7 .m3u Buffer Overflow

No description provided by source. Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter Google Dork: N/A Date: 11/12/2010 Author: zota Thanks to Andrew; [email protected] Software Link:...

PEStudio 3.69 - Denial of Service

No description provided by source. Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Window...

XM Easy Professional FTP Server 5.8.0 - Denial of Service

No description provided by source. I discovered a denial-of-service vulnerability on XM Easy Professional FTP Server product. After successfuly logged-in, when you send HELP AAAA...4074 times, ftp daemon crashes. ----------------------- Exploit Title: XM Easy Professional FTP Server 5.8.0 Denial ...

Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)

No description provided by source. !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader...

Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bData Dynamics ActiveReport ActiveX Control actrpt2.dll = 2.5 SaveLayout Inscure Method/b url:...

Sygate Personal Firewall 5.6 build 2808 ActiveX with DEP bypass

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

KnFTP 1.0 - Buffer Overflow Exploit - DEP Bypass

No description provided by source. module for metasploit framework, for more information see the Description. Copyright C October 04th 2011 Author: Javier Aguinaga pasta el.tio.pastafrolaatgmail.com This program is free software: you can redistribute it and/or modify it under the terms of the GNU...

dreamMail e-mail client 4.6.9.2 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: dreamMail e-mail client Version: 4.6.9.2 Vendor Site: http://www.dreammail.eu Software Download: http://www.dreammail.eu/intl/en/download.html Tested on: Windows XP SP3 Eng. Tested on: Window...

VCDGear 3.50 (.cue) - Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/ruby ''' Author: Provensec www.provensec.com [email protected] Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

Microsoft Windows Automatic LNK Shortcut File Code Execution

No description provided by source. From: http://www.ivanlef0u.tuxfamily.org/?p=411 1. Unzip the files in 'C: '. Start a DbgView or paste a KD to your VM. 2. Rename 'suckme.lnk' to 'suckme.lnk' and let the magic do the rest of shell32.dll. 3. Look at your logs...

Pirch IRC 98 Client - (response) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Pirch IRC 98 Client response Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Ref : Bid 5079 Exploited by : His0k4 Greetings : All friends DZ from socket...

Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers...

Windows Media Player 9.0 ActiveX Control Media File Attribute Corruption Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence...

ProfitCode Shopping Cart Multiple LFI/RFI Vulnerabilities

No description provided by source. Author: Zer0 Thunder Site : http://www.profitcode.net/ - http://profbiz-cart.sourceforge.net/ Tested on: Windows XP sp2 WampServer 2.0i - There are Cople of pages that has the LFI vuln Vuln c0de : dl-authcontent.php $returlvar = dloads; include $docroot...

Microsoft Message Queueing Service Path Overflow

No description provided by source. $Id: ms05017msmq.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...