HP Mercury Quality Center - ActiveX Control ProgColor Buffer Overflow (Metasploit)

$Id: hpmqcprogcolor.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Destiny Media Player 1.61 - PLS .m3u Buffer Overflow (Metasploit)

$Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Publisher File Conversion Textbox buffer overflow

Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...

Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH

Exploit for windows platform in category local exploits ===================================================================== Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 .zip SEH ===================================================================== !/usr/bin/ruby Software : Urgent...

Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)

$Id: ms09043owchtmlurl.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft DirectShow - 'msvidctl.dll' MPEG-2 Memory Corruption (MS09-032/MS09-037) (Metasploit)

$Id: msvidctlmpeg2.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Publisher File Conversion Textbox buffer overflow

Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...

WinZip FileView - 'WZFILEVIEW.FileViewCtrl.61' ActiveX Buffer Overflow (Metasploit)

$Id: winzipfileview.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Acoustica CD/DVD Label Maker Proof Of Concept

Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 2010 Auto Reply Support Ticket ID:155626 Apr 1...

Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service

Exploit for windows platform in category dos / poc ============================================================== Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service ============================================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today...

Bigant Messenger 2.52 Heap Overflow

!/usr/bin/python Bigant Messenger = v2.52 - AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit Found by: Steven Seeley - mrme AT corelan.be - http://net-ninja.net/ Homepage: http://www.bigantsoft.com/ Download: http://www.bigantsoft.com/download.html Tested on: Windows XP SP3 IE 6 & 7 Mark...

NetSarang Xftp 3.0 PWD响应栈溢出漏洞

BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...

Canvas Tag Denial Of Service

"; while 1 echo ""; echo ""; echo ""; ?...

Acoustica v. 3.32 cd/dvd label maker .m3u PoC

Exploit for windows platform in category dos / poc ============================================= Acoustica v. 3.32 cd/dvd label maker .m3u PoC ============================================= Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link:...

Acoustica 3.32 CDDVD Label Maker - .m3u (PoC)

Acoustica 3.32 CDDVD Label Maker - .m3u PoC Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 20...

Checks XP Internetcommunication of some Programs (Windows)

The script Checks XP Internetcommunication of some Programs: Internet Explorer Windows Media Player Windows Messenger Windows Zeitdienst Hilfe- und Supportcenter Windows Update Gerätemanager Windows Aktivierung und Registrierung Aktualisierung der Stammzertifikate Ereignisanzeige Webdienst...

Avast! 4.7 - aavmker4.sys Local Privilege Escalation

Avast! 4.7 - aavmker4.sys Local Privilege Escalation !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti ...

Bigant Messenger 2.52 - AntCore.dll RegisterCom() Remote Heap Overflow

Bigant Messenger 2.52 - AntCore.dll RegisterCom Remote Heap Overflow !/usr/bin/python Bigant Messenger = v2.52 - AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit Found by: Steven Seeley - mrme AT corelan.be - http://net-ninja.net/ Homepage: http://www.bigantsoft.com/ Download:...

Bigant Messenger <= v2.52 - (AntCore.dll) RegisterCom() Heap Overflow

Exploit for windows platform in category remote exploits ======================================================================================= Bigant Messenger = v2.52 AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit...

Serenity Audio Player Buffer Overflow Exploit

New Ticket: Serenity Audio Player Buffer Overflow Meta Exploit Title: Serenity Audio Player Buffer Overflow Meta Date: April 26, 2010 Author: Blake Version: 3.2.3 Tested on: Windows XP SP3 This file is part of the Metasploit Framework and may be subject to redistribution and commercial...