SureThing CD Labeler Stack Overflow

/ surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Writeup: Unicode...

Pigalle Version 0.76 Alpha Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== Pigalle Version 0.76 Alpha Remote File Inclusion Vulnerability ============================================================== + : Exploit Title : Pigalle Version 0.76 Alpha Remote...

Joomla Component com_cinema SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla Component comcinema SQL Injection Vulnerability ======================================================= Exploit Title: joomla component cinema SQL injection Vulnerability Date: 09...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. OpenVAS Vulnerability Test $Id: secpodms10-037.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 980218 Authors: Sooraj KS...

Castripper 2.50.70 Stack Buffer Overflow With DEP Bypass

!/usr/bin/python Castripper 2.50.70 .pls stack buffer overflow w/ DEP bypass exploit Author: mrme - https://net-ninja.net - mrme AT corelan.be Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team...

Joomla! Component cinema - SQL Injection

Joomla! Component cinema - SQL Injection ========================================================= Exploit Title: joomla component cinema SQL injection Vulnerability Date: 09 juny 2010 Author: Suddendeath [email protected] Software Link: N/A Tested on: Windows XP 2 Platform / Tested on:...

Microsoft Help Center XSS and Command Execution

Help and Support Center is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing help documents directly via URLs by installing a protocol handler for the scheme "hcp". Due to an error in validation of input to hcp:// combined with a...

Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability (980195)

This host is missing a critical security update according to Microsoft Bulletin MS10-034. OpenVAS Vulnerability Test $Id: secpodms10-034.nasl 5361 2017-02-20 11:57:13Z cfi $ Description: Microsoft Data Analyzer and IE Developer Tools ActiveX Control Vulnerability 980195 Authors: Veerendra GG...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0484

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to...

Immunity Canvas: MS10_032

Name| ms10032 ---|--- CVE| CVE-2010-0485 Exploit Pack| CANVAS Description| ms10032 Notes| CVE Name: CVE-2010-0485 VENDOR: Microsoft Notes: This is a local kernel vulnerability for XP, 2003, and Vista. It will only work on 32 bit platform. The binary will not trigger the bug if running on a 64 bit...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remo...

Input validation

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during...

CVE-2010-1263

CVE-2010-1263 is a remote code execution vulnerability in the COM object validation during instantiation in Windows Shell and WordPad. The issue affects Windows XP SP3, Windows XPx64 SP2, Windows Server 2003 SP2 and x64 Itanium editions, Windows Vista SP1/SP2, Windows Server 2008 SP2, and Windows...

CVE-2010-1263

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during...

SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit

Exploit for windows platform in category local exploits =================================================================== SureThing CD Labeler m3u/pls - Unicode Stack Overflow PoC Exploit =================================================================== / surethingcdlabelerbofpoc.c SureThing ...

Easy CD-DA Recorder 2007 Buffer Overflow

Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type of vuln : SEH Greetz to : Corelan Security Team The Cr...

Microsoft Windows OpenType Compact Font Format Driver Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

Wordpress (install.php) Any Version

Exploit for php platform in category web applications =================================== Wordpress install.php Any Version =================================== + : Author : ThE DarK + : e-Mail : email protected + : Sites : Arab-Hack.net , Sa-Hacker.Com , Gaza-Hack.net , error-y.com + : Software...

Microsoft Windows Kernel 'Win32k.sys' TrueType Font Parsing Code Execution Vulnerability

Description Microsoft Windows is prone to a local code-execution vulnerability. This issue affects the Windows kernel and arises when TrueType fonts are parsed. Successfully exploiting this issue will allow an attacker to execute arbitrary code with kernel-level privileges, completely compromisin...