17220 matches found
Horizon Web Builder (fshow.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...
Target Longlife Media Player 2.0.2.0 (.wav) - Crash PoC
No description provided by source. Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger yuda at cr0security.com - http://www.cr0security.com Software Link :...
Mini-stream Ripper 2.9.7.273 (.m3u) Universal BoF
No description provided by source. !/usr/bin/perl Exploit Title: Mini-stream Ripper 2.9.7.273 .m3u Universal Buffer Overflow Date: 28/08/2011 Author: D3r K0n!G Version: 2.9.7.273 Tested on: Windows XP SP3 CVE : N/A Greets to: All my friends sec4ever.com & h4kz.net my $file = mini.m3u; my $buff =...
WaveMax Sound Editor 4.5.1 - Denial of Service PoC
No description provided by source. Exploit Title: WaveMax Sound Editor 4.5.1 Local Crash PoC Software Link: http://www.wave-max.com/wavemax/ Tested on: Win XP SP3 Date: 04-12-2010 Author: h1ch4m Email: [email protected] my $file= 1.cda; my $junk = \x41 x 1000; open$FILE,$file; print $FILE $junk;...
VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested...
Winamp <= 5.34 .MP4 File Code Execution Exploit
No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicate...
EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit (IE)
No description provided by source. EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE Vendor: EdrawSoft - http://www.edrawsoft.com Platform Used: MS Win XP Pro SP3 en / IE 8.0 CompanyName EDrawSoft FileDescription EDraw Flowchart ActiveX Control Module FileVersion 2, 3, 0, 6...
xRadio 0.95b (.xrl) Local Buffer Overflow (SEH)
No description provided by source. GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray...
Pegasus Imaging ImagXpress 8.0 - Remote Arbitrary File Overwrite
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (4)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...
XM Easy Personal FTP Server <= 5.30 - Remote Format String Write4 Exploit
No description provided by source. !/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target environment: Windows Server 23k:...
AudioCoder 0.8.22 (.m3u) - SEH Buffer Overflow
No description provided by source. !/usr/bin/perl Exploit Title: AudioCoder 0.8.22 .m3u - SEH Buffer Overflow Date: 10-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: AudioCoder 0.8.22 http://www.mediacoderhq.com/audio/ Software Link:...
Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption PoC
No description provided by source. !/usr/bin/perl -w Title: Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC Summary: The eToken PKI Client is the software that enables eToken USB operation and the implementation of eToken PKI-based solutions. These solutions...
F-Secure Multiple Products ActiveX SEH Overwrite Vulnerability (Heap Spray)
No description provided by source. Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Exploit-DB Notes: moved to 'local' since you have to run it as...
Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)
No description provided by source. Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on windows xp SP 3 FR download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where are you : Hard luck...
Golden FTP Server 4.70 - PASS Command Buffer Overflow Exploit
No description provided by source. GoldenFTP 4.70 PASS Exploit Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on XP SP3 Vendor Contacted: 1/17/2011 no response For this exploit to work correctly, you need to know the subnet that the server is running on. You also need ...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file...
rgboard 4.2.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: rgboard SQL Injection Vulnerability inurl: rgboard4/list.php Date: 2011. 6.22 Author: hamt0ry [email protected] Test on : Windowss XP SP3 Software Link: http://v4.rgboard.com/rg4board/down.php?&bbscode=rgboardpds&bdnum=1757&key=0&mode=down Version:...
Windows OpenType Font - File Format DoS Exploit
No description provided by source. OpenType font file format remote client-side DoS exploit for Windows By Oleksiuk Dmytro aka Cr4sh http://twitter.com/dolex http://blog.cr4.sh mailto:[email protected] INFO: Zero day vulnerability exists in kernel-mode library ATMFD.DLL, that using by OS for worki...
Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability
No description provided by source. Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3...