GOM Player v2.1.33 (ASX) Stack Buffer Overflow (MSF)

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

TFTP SERVER v1.4 (RRQ) Remote Root BOF Exploit (MSF)

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

Microsoft Aims to Make Life Harder, More Expensive For Attackers

MIAMI BEACH–It’s been a decade now since Microsoft began focusing on product security as a top priority and there have been a lot of successes and some failures along the way. But in that time, one of the things that most definitely has changed as a result of the Trustworthy Computing program is...

WorldMail imapd 3.0 SEH Overflow

!/usr/bin/python import sys import socket Exploit Title: WorldMail imapd 3.0 SEH overflow egg hunter Tested on: XP SP3 en-us Author: TheXero Website: www.thexero.co.uk http://www.nullsecurity.net Check for parameters if lensys.argv != 3: print "Usage: " + sys.argv0 + " 127.0.0.1 143" quit Assigns...

BS.Player 2.57 Buffer Overflow (Unicode SEH)

This module exploits a buffer overflow in BS.Player 2.57. When the playlist import is used to import a specially crafted m3u file, a buffer overflow occurs allowing arbitrary code execution. This module requires Metasploit: https://metasploit.com/download Current source:...

WorldMail IMAPd 3.0 - Remote Overflow (SEH) (Egghunter)

WorldMail IMAPd 3.0 - Remote Overflow SEH Egghunter !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team wm-imapd.py - WorldMail IMAPD remote exploit DATE 09/01/2012 DESCRIPTION WorldMail IMAPD - SEH overflow - remote...

WorldMail imapd 3.0 SEH overflow (egg hunter)

Exploit for windows platform in category remote exploits !/usr/bin/python import sys import socket Exploit Title: WorldMail imapd 3.0 SEH overflow egg hunter Tested on: XP SP3 en-us Author: TheXero Website: www.thexero.co.uk http://www.nullsecurity.net Check for parameters if lensys.argv != 3:...

WorldMail IMAPd 3.0 - Remote Overflow (SEH) (Egghunter)

!/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team wm-imapd.py - WorldMail IMAPD remote exploit DATE 09/01/2012 DESCRIPTION WorldMail IMAPD - SEH overflow - remote exploit AUTHOR TheXero -...

Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)

This host is missing an important security update according to Microsoft Bulletin MS12-006. OpenVAS Vulnerability Test $Id: secpodms12-006.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows SSL/TLS Information Disclosure Vulnerability 2643584 Authors: Antu Sanadi Copyright c 2012 SecPod,...

Windows ClickOnce Application Installer Remote Code Execution Vulnerability (2584146)

This host is missing an important security update according to Microsoft Bulletin MS12-005. OpenVAS Vulnerability Test $Id: secpodms12-005.nasl 5341 2017-02-18 16:59:12Z cfi $ Windows ClickOnce Application Installer Remote Code Execution Vulnerability 2584146 Authors: Rachana Shetty Copyright:...

Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)

This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...

NTR ActiveX Control StopModule() Remote Code Execution

This module exploits a vulnerability found in the NTR ActiveX 1.1.8. The vulnerability exists in the StopModule method, where the lModule parameter is used to dereference memory to get a function pointer, which leads to code execution under the context of the user visiting a malicious web page...

TFTP Server 1.4 ST RRQ Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)

This host is missing an important security update according to Microsoft Bulletin MS12-002. OpenVAS Vulnerability Test $Id: secpodms12-002.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Object Packager Remote Code Execution Vulnerability 2603381 Authors: Madhuri D Copyright: Copyright c...

MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2646524)

This host is missing an important security update according to Microsoft Bulletin MS12-003. OpenVAS Vulnerability Test $Id: secpodms12-003.nasl 5366 2017-02-20 13:55:38Z cfi $ MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2646524 Authors: Antu Sanadi Updated By:...

CVE-2012-0004

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll...

Remote code execution

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll...

Remote code execution

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player WMP in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka "MIDI Remote Code Execution...

CVE-2012-0003

CVE-2012-0003 is a remote-code-execution issue in Windows Multimedia Library (winmm.dll) used by Windows Media Player. A specially crafted MIDI file can trigger the vulnerability, leading to arbitrary code execution with the user’s context. Affected products include Windows XP SP2/SP3, Windows Se...

CVE-2012-0013

CVE-2012-0013 is a remote-code-execution vulnerability in the Windows PackagerClickOnce handling: ClickOnce file types are not included in the Windows Packager unsafe file type list, allowing an attacker to execute arbitrary code via a crafted Office document. Affected OSes include Windows XP SP2...