CombiWave Lite 4.0.1.4 - Denial of Service

CombiWave Lite 4.0.1.4 - Denial of Service Exploit Title: CombiWave Lite v4.0.1.4 .mws DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/combiwave-lite2219101.html?hl=&ia=0 Version: v4.0.1.4 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python...

myMP3-Player 3.0 Buffer Overflow

Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk = "\x41" 1024 ret = "\x65\x82\xA5\x7...

Windows win32k.sys驱动边界检查本地拒绝服务漏洞（MS10-048）

BUGTRAQ ID: 42250 CVE ID: CVE-2010-1887 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证传送给系统调用的参数，本地用户可以通过运行特制的应用程序来利用这个漏洞导致系统变得没有响应并自动重启。 Microsoft Windows XP SP3 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Server...

Windows win32k.sys驱动用户池溢出本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42245 CVE ID: CVE-2010-1895 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动在从用户态进行拷贝时没有正确地分配内存，导致权限提升。成功利用这个漏洞的攻击者可以执行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Server 2003 SP2 厂商补丁： Microsoft...

JaMP Player 4.2.2.0 - Denial of Service

Exploit Title: JaMP Player v4.2.2.0 .m3u DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/jamp-player2219088.html?hl=&ia=0 Version: v4.2.2.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk = "\x41" 5000 exploit =...

dbPowerAmp Audio Player (.m3u ) Denial fo Service

Exploit for windows platform in category dos / poc ================================================= dbPowerAmp Audio Player .m3u Denial fo Service ================================================= Author: hamzahackdz & Black-liondz1 Software Link: http://www.dbpoweramp.com/bin/dBpowerAMP-r1.exe...

RSP MP3 Player OCX Active-X Buffer Overflow

. . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow heap spray By : MadjiX , Dz8aHotmail.com Discovered by Blake: http://www.exploit-db.com/exploits/14309/ Greetings: His0k4 , Bibi-info , The g0bl!n y , sec4ever.com Tested on Windows Xp Sp3 Fr,with IE6 sh =...

JaMP Player 4.2.2.0 - Denial of Service

JaMP Player 4.2.2.0 - Denial of Service Exploit Title: JaMP Player v4.2.2.0 .m3u DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/jamp-player2219088.html?hl=&ia=0 Version: v4.2.2.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename =...

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion Exploit Title: PHP-Nuke-8.1-seo-Arabic Remote File Include Date: 12-8-2010 Author: LoSt.HaCkEr Software Link: http://scripts.bdr130.net/faile/PHP-Nuke-8.1-seo-Arabic.zip Version: v 8.1 Tested on: Windows XP CVE : هكر المسيب Contact:...

JaMP Player v4.2.2.0 Denial of Service

Exploit for windows platform in category dos / poc ====================================== JaMP Player v4.2.2.0 Denial of Service ====================================== Exploit Title: JaMP Player v4.2.2.0 .m3u DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link:...

Sopcast 3.2.9 Buffer Overflow

Sopcast POC by Sud0 Tested on XP SP3 EN on VBox with IE 7 Spraying a lot to get a nice unicode usable address 0x20260078 I sprayed with a set of P/P/R instructions to come back to the stack Need internet connection on the box to trigger the vuln Wait for the Spray to finish IE will seem freezed f...

Windows win32k.sys驱动用户输入验证本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42210 CVE ID: CVE-2010-1896 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证用户态输入，本地用户可以通过执行恶意应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft...

AoAAudioExtractor 2.0.0.0 Proof Of Concept

'AoAAudioExtractor 2.0.0.0 ActiveX PoC SEH ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down: http://www.aoamedia.com/audioextractor.exe ' Date: 2010-08-09 'samir tjrs mahboul-3lik arg1=String2048, "A" nseh=String4, "B" seh=String4, "C" arg4=String100, "D"...

Fat Player 0.6b WAV File Processing Buffer Overflow

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4962...

CombiWave Lite v4.0.1.4 Denial of Service

Exploit for windows platform in category dos / poc ========================================= CombiWave Lite v4.0.1.4 Denial of Service ========================================= Exploit Title: CombiWave Lite v4.0.1.4 .mws DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link:...

Easy FTP 1.7.0.11 Buffer Overflow

Exploit Title: Easy FTP Server v1.7.0.11 NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands Remote Buffer Overflow Exploit Date: 10/8/2010 Author: Rabih Mohsen Software Link:http://code.google.com/p/easyftpsvr/downloads/detail?name=easyftp-server-1.7.0.11-cn.zip Version: 1.7.0.11 Tested on:...

Easy FTP Server v1.7.0.11 Multiple Commands Buffer Overflow Exploit

Exploit for windows platform in category remote exploits =================================================================== Easy FTP Server v1.7.0.11 Multiple Commands Buffer Overflow Exploit =================================================================== Note: RNFR, DELE, RMD, STOR commands...

CVE-2010-1895

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow...

CVE-2010-1882

Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in 1 a crafted media file or 2 crafted streaming content, aka...

CVE-2010-1888

Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."...