JPEGSnoop 1.7.3 DLL Hijacking

Software : JPEGSnoop Software Link: https://sourceforge.net/projects/jpegsnoop/ Version: LPORT=4444 JPEGSnoopENU.dll Exploit: Place a dummy or original JPEG file having .jpeg extension file with the malicious dll. When the file is opened in JPEGSnoop you can get machines access and even the shell...

Express Zip 2.40 - Directory Traversal

Express Zip 2.40 - Directory Traversal !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link: http://www.nchsoftware.com/zip/zipplus.exe Vulnerable...

Express Zip 2.40 - Directory Traversal

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link:...

PCMan FTP Server Buffer Overflow - PUT Command (Metasploit)

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PCMAN FTP Server Buffer Overflow - PUT Command', 'Description' = %q Th...

PCMan FTP Server - 'PUT' Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PCMAN FTP Server Buffer Overflow - PUT Command', 'Description' = %q This module exploits a buffer overflow vulnerability found ...

Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)

Exploit for windows platform in category dos / poc Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

PCMAN FTP Server 2.0.7 Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PCMAN FTP Server Buffer Overflow - PUT Command', 'Description' = %q This module exploits a buffer overflow vulnerability found ...

Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)

Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

Xion Audio Player 1.5 Denial Of Service

Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

TallSoft SNMP TFTP Server 1.0.0 Denial Of Service

Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TFTP Server 2.2 DoS...

TallSoft SNMP/TFTP Server 1.0.0 - Denial of Service

Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TFTP Server 2.2 DoS...

TallSoft SNMPTFTP Server 1.0.0 - Denial of Service

TallSoft SNMPTFTP Server 1.0.0 - Denial of Service Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TF...

TallSoft SNMP/TFTP Server 1.0.0 - Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TF...

CoolPlayer (Standalone) build 2.19 - '.m3u' Local Stack Overflow

Exploit Title: CoolPlayer Standalone build 2.19 - .m3u Stack Overflow Date: 22-03-2016 Software Link: https://sourceforge.net/projects/coolplayer/files/Coolplayer/219/CoolPlayer219Bin.zip Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Yet another exploi...

CoolPlayer (Standalone) build 2.19 - .m3u Local Stack Overflow

CoolPlayer Standalone build 2.19 - .m3u Local Stack Overflow Exploit Title: CoolPlayer Standalone build 2.19 - .m3u Stack Overflow Date: 22-03-2016 Software Link: https://sourceforge.net/projects/coolplayer/files/Coolplayer/219/CoolPlayer219Bin.zip Exploit Author: Charley Celice stmerry Contact:...

CoolPlayer (Standalone) build 2.19 - '.m3u' Stack Overflow

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer Standalone build 2.19 - .m3u Stack Overflow Date: 22-03-2016 Software Link: https://sourceforge.net/projects/coolplayer/files/Coolplayer/219/CoolPlayer219Bin.zip Exploit Author: Charley Celice stmerry Contact:...

Sysax Multi Server 6.50 SEH Overflow

Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit Date: 03/21/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.sysax.com/ Vulnerable Version Download: http://download.cnet.com/Sysax-Multi-Server/3000-21604-76171493.html 6.50 a...

Sysax Multi Server 6.50 - HTTP File Share Overflow Remote Code Execution (SEH)

Sysax Multi Server 6.50 - HTTP File Share Overflow Remote Code Execution SEH Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit Date: 03/21/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.sysax.com/ Vulnerable Version Download...

Sysax Multi Server 6.50 - HTTP File Share Overflow Remote Code Execution (SEH)

Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit Date: 03/21/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.sysax.com/ Vulnerable Version Download: http://download.cnet.com/Sysax-Multi-Server/3000-21604-76171493.html 6.50 a...

Sysax Multi Server 6.50 - HTTP File Share SEH Overflow Remote Code Execution

Exploit for windows platform in category remote exploits Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit Date: 03/21/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.sysax.com/ Vulnerable Version Download:...