DIZzy 1.12 - Local Stack Overflow

No description provided by source. !/usr/bin/ruby Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x Version: 1.12 Tested on: Windows XP SP3 Eng/Spa CVE: n/a Notes: Bug was originally found on 22/02/2010 but since there is no response from developers ...

Liquid XML Studio 2010 <= 8.061970 - (LtXmlComHelp8.dll) OpenFile() Remote 0day Overflow Exploit

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

Microsoft Visual FoxPro 6.0 (FPOLE.OCX 6.0.8450.0) - Remote PoC

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------------------- b0-day: Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library FPOLE.OCX v. 6.0.8450.0...

FoxPlayer 2 (.m3u) Local BOF PoC

No description provided by source. Exploit Title : FoxPlayer 2 .m3u Local BOF PoC download : http://www.foxmediatools.com/products/foxplayer.html tested on windows xp SP 3 FR Author: MadjiX - Dz8athotmaildotcom Special Greets: Bibi-info , His0k4 my $file= MadjiX.m3u; my $junk1= \x41 x 100000 ;...

Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (SEH) (PoC)

No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF SEH PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/2010 Software link:...

Horizon Web Builder (fshow.php) SQL Injection Vulnerability

No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...

Mini-stream Ripper 2.9.7.273 (.m3u) Universal BoF

No description provided by source. !/usr/bin/perl Exploit Title: Mini-stream Ripper 2.9.7.273 .m3u Universal Buffer Overflow Date: 28/08/2011 Author: D3r K0n!G Version: 2.9.7.273 Tested on: Windows XP SP3 CVE : N/A Greets to: All my friends sec4ever.com & h4kz.net my $file = mini.m3u; my $buff =...

WaveMax Sound Editor 4.5.1 - Denial of Service PoC

No description provided by source. Exploit Title: WaveMax Sound Editor 4.5.1 Local Crash PoC Software Link: http://www.wave-max.com/wavemax/ Tested on: Win XP SP3 Date: 04-12-2010 Author: h1ch4m Email: [email protected] my $file= 1.cda; my $junk = \x41 x 1000; open$FILE,$file; print $FILE $junk;...

VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH)

No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested...

Winamp <= 5.34 .MP4 File Code Execution Exploit

No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicate...

EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit (IE)

No description provided by source. EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE Vendor: EdrawSoft - http://www.edrawsoft.com Platform Used: MS Win XP Pro SP3 en / IE 8.0 CompanyName EDrawSoft FileDescription EDraw Flowchart ActiveX Control Module FileVersion 2, 3, 0, 6...

xRadio 0.95b (.xrl) Local Buffer Overflow (SEH)

No description provided by source. GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray...

Pegasus Imaging ImagXpress 8.0 - Remote Arbitrary File Overwrite

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (4)

No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...

XM Easy Personal FTP Server <= 5.30 - Remote Format String Write4 Exploit

No description provided by source. !/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target environment: Windows Server 23k:...

AudioCoder 0.8.22 (.m3u) - SEH Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: AudioCoder 0.8.22 .m3u - SEH Buffer Overflow Date: 10-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: AudioCoder 0.8.22 http://www.mediacoderhq.com/audio/ Software Link:...

Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption PoC

No description provided by source. !/usr/bin/perl -w Title: Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC Summary: The eToken PKI Client is the software that enables eToken USB operation and the implementation of eToken PKI-based solutions. These solutions...

F-Secure Multiple Products ActiveX SEH Overwrite Vulnerability (Heap Spray)

No description provided by source. Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Exploit-DB Notes: moved to 'local' since you have to run it as...

Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)

No description provided by source. Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on windows xp SP 3 FR download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : Hard luck...

Golden FTP Server 4.70 - PASS Command Buffer Overflow Exploit

No description provided by source. GoldenFTP 4.70 PASS Exploit Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on XP SP3 Vendor Contacted: 1/17/2011 no response For this exploit to work correctly, you need to know the subnet that the server is running on. You also need ...