16608 matches found
Microsoft Windows CreateWindow Function Callback (MS10-048)
Exploit for windows platform in category dos / poc =========================================================== Microsoft Windows CreateWindow Function Callback MS10-048 =========================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...
Microsoft Windows Kernel Threads Creation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...
RSP MP3 Player OCX ActiveX Buffer Overflow (heap spray)
Exploit for windows platform in category remote exploits ======================================================= RSP MP3 Player OCX ActiveX Buffer Overflow heap spray ======================================================= . . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow...
Microsoft Security Bulletin MS10-047 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852)
Microsoft Security Bulletin MS10-047 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 981852 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows...
SopCast 3.2.9 - Remote Command Execution
Sopcast POC by Sud0 Tested on XP SP3 EN on VBox with IE 7 Spraying a lot to get a nice unicode usable address 0x20260078 I sprayed with a set of P/P/R instructions to come back to the stack Need internet connection on the box to trigger the vuln Wait for the Spray to finish IE will seem freezed f...
Microsoft Windows - CreateWindow Function Callback (MS10-048)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...
RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray
. . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow heap spray By : MadjiX , Dz8aHotmail.com Discovered by Blake: http://www.exploit-db.com/exploits/14309/ Greetings: His0k4 , Bibi-info , The g0bl!n y , sec4ever.com Tested on Windows Xp Sp3 Fr,with IE6 sh =...
phpMUR Remote File Disclosure Vulnerability
Exploit for php platform in category web applications =========================================== phpMUR Remote File Disclosure Vulnerability =========================================== Exploit Title: phpMUR Remote File Disclosure Author: Offensive email protected Red-Stone On Inject0r Community ...
myMP3-Player v3.0 Buffer Overflow Exploit
No description provided by source. Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk =...
Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)
Rosoft Media Player 4.4.4 - Buffer Overflow SEH PoC rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilenam...
Microsoft Windows 'xxxCreateWindowEx()' Window Creation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker may exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...
Microsoft Windows Movie Maker Remote Buffer Overflow Vulnerability
Description Microsoft Windows Movie Maker is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition. Technologies Affect...
Microsoft Windows - CreateWindow Function Callback (MS10-048)
Microsoft Windows - CreateWindow Function Callback MS10-048 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Window...
Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)
rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilename , 'w' textfile.writejunk textfile.close...
AoAAudioExtractor 2.0.0.0 - ActiveX (PoC) (SEH)
AoAAudioExtractor 2.0.0.0 - ActiveX PoC SEH 'AoAAudioExtractor 2.0.0.0 ActiveX PoC SEH ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down: http://www.aoamedia.com/audioextractor.exe ' Date: 2010-08-09 'samir tjrs mahboul-3lik arg1=String2048, "A" nseh=String4, "B"...
dBpowerAMP Audio Player 2 (FileExists) ActiveX Buffer Overflow Exploit
Exploit for windows platform in category remote exploits ====================================================================== dBpowerAMP Audio Player 2 FileExists ActiveX Buffer Overflow Exploit ====================================================================== ' Exploit Title: dBpowerAMP...
Quintessential Player 5.0.121 Denial of Service
Exploit for windows platform in category dos / poc =============================================== Quintessential Player 5.0.121 Denial of Service =============================================== vulnerble application link http://www.quinnware.com/downloads.php tested on XP SP2/3 author abhishek...
Visual MP3 Splitter Joiner 6.1 - Denial of Service
Visual MP3 Splitter Joiner 6.1 - Denial of Service Exploit Title: Visual MP3 Splitter & Joiner 6.1 .mp3 , .wav DoS Date: 9 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.maniactools.com/soft/mp3-splitter-joiner/index.shtml Version: 6.1 Tested on: Windows XP SP 2 CVE : N /A...
Fat Player 0.6b WAV File Processing Buffer Overflow (SEH)
Exploit for windows platform in category local exploits ========================================================= Fat Player 0.6b WAV File Processing Buffer Overflow SEH ========================================================= Stack-based buffer overflow in Fat Player 0.6b allows remote attacker...
Visual MP3 Splitter & Joiner 6.1 - Denial of Service
Exploit Title: Visual MP3 Splitter & Joiner 6.1 .mp3 , .wav DoS Date: 9 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.maniactools.com/soft/mp3-splitter-joiner/index.shtml Version: 6.1 Tested on: Windows XP SP 2 CVE : N /A !/usr/bin/python User needs to change the following extension...