Apple QuickTime Player 7.7.2 - Crash (PoC)

!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...

Huawei Technologies - SEH Based Buffer Overflow

Document Title: =============== Huawei Technologies - SEH Based Buffer Overflow References: =========== View: http://www.youtube.com/watch?v=pkOaPQJPQbE Release Date: ============= 2012-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 731 Common Vulnerability Scoring...

MS08-067 Microsoft Server Service Relative Path Stack Corruption

This module exploits a parsing flaw in the path canonicalization code of NetAPI32.dll through the Server Service. This module is capable of bypassing NX on some operating systems and service packs. The correct target must be used to prevent the Server Service along with a dozen others in the same...

Adobe Reader 10.1.4 - Crash (PoC)

!/usr/bin/perl Title : Adobe reader 10.1.4 memory corruption Version : 10.1.4.38 Date : 2012-10-21 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Bug : ---- Memory corruption during the handling of the...

ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal

ManageEngine Security Manager Plus 5.5 build 5505 - Directory Traversal !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Security Manager Plus 0x90.nl Software link :...

RealPlayer 15.0.6.14 (.3GP) Arbitrary Code Execution POC

RealPlayer 15.0.6.14 suffers from Arbitrary Code Execution during handling a .3GP file Title : RealPlayer 15.0.6.14 .3GP Arbitrary Code Execution Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : X...

VulnCheck KEV: CVE-2009-3126

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3,...

VulnCheck KEV: CVE-2008-2249

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

BestPlay v4.1 (.mp3) Crash PoC

Exploit for windows platform in category local exploits Exploit Title: BestPlay v4.1 .mp3 Crash PoC Version: 4.1 Date: 2012-10-18 Software Link: http://www.procesualitatea.ro/bestplay/ Author: LolzSec Tested on: Windows XP SP3 Greeting To : Da'One !/usr/bin/python file="Crash.mp3" crash="\x41"...

Immunity Canvas: JAVA_JAXWS

Name| javajaxws ---|--- CVE| CVE-2012-5076 Exploit Pack| CANVAS Description| Java Applet JAX-WS Remote Code Execution Notes| CVE Name: CVE-2012-5076 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 7 and earlier Tested on: - Windows XP SP3 with JDK/JRE 7 update 6 To run from command line...

Joomla! Component com_icagenda - 'id' Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . ------------------------------------------------------------------------------ Exploit Title:...

New Internet Explorer zero-day, Can trigger malware automatically

The new zero day exploit has been discovered and being exploited in the wild. This can be used to load malicious application on victim machines running fully patched Windows XP SP3 along with the latest editions of the IE 7 and IE 8 browser and Adobe's Flash software. Eric Romang was examining on...

QQPlayer 3.7.892 - m2p quartz.dll Heap Pointer Overwrite (PoC)

QQPlayer 3.7.892 - m2p quartz.dll Heap Pointer Overwrite PoC Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC Date: 10/14/2012 Author: James Ritchey Vendor Homepage: www.qq-player.com Software Link: http://www.qq-player.com/downloaden.php Version: 3.7.892 Tested on: Windo...

QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC

Exploit for windows platform in category dos / poc Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC Date: 10/14/2012 Author: James Ritchey Vendor Homepage: www.qq-player.com Software Link: http://www.qq-player.com/downloaden.php Version: 3.7.892 Tested on: Windows XP SP3 ...

Huawei Technologies Internet Mobile Unicode SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : email protected Greetings to all moroccan researchers and white hats . Vulnerable : Etisalat , Vodafo...

Microsoft Windows Media Player 10 - '.avi' Integer Division By Zero Crash (PoC)

!/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title : Windows Media Player 10 - .avi Integer Division By Zero Vulnerability Auth...

Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash (PoC)

Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash PoC !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title ...

Huawei Technologies Internet Mobile - Unicode (SEH)

Huawei Technologies Internet Mobile - Unicode SEH !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Vulnerable : Etisalat , Vodafone...

QQPlayer 3.7.892 - m2p 'quartz.dll' Heap Pointer Overwrite (PoC)

Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC Date: 10/14/2012 Author: James Ritchey Vendor Homepage: www.qq-player.com Software Link: http://www.qq-player.com/downloaden.php Version: 3.7.892 Tested on: Windows XP SP3 l = 3315716 "A" s1 = 0,'\x00\x00\x01\xba', 2048,...

QQPlayer 3.7.892 Heap Pointer Overwrite

Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC Date: 10/14/2012 Author: James Ritchey Vendor Homepage: www.qq-player.com Software Link: http://www.qq-player.com/downloaden.php Version: 3.7.892 Tested on: Windows XP SP3 l = 3315716 "A" s1 = 0,'\x00\x00\x01\xba', 2048,...