ZippHo 3.0.6 - .zip Local Stack Buffer Overflow

ZippHo 3.0.6 - .zip Local Stack Buffer Overflow !/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan...

ZippHo 3.0.6 Stack Buffer Overflow

!/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan Security Team & fl0 fl0w...

ZippHo 3.0.6 - '.zip' Local Stack Buffer Overflow

!/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan Security Team & fl0 fl0w...

Microsoft Windows XP Explorer Heap Overflow

Multiple vulnerabilities exist in the Microsoft Windows XP image rendering engine when processing EMF Enhanced MetaFile Format files. The vulnerabilities lead to a heap overflow. The vulnerabilities allow a DoS denial of service attack and possible remote code execution attacks. The primary...

myMP3-Player 3.0 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/perl Title: myMP3-Player v3.0 .m3u Local Buffer Overflow Exploit SEH Date: 18.03.2010 Author: n3w7u Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 and the other version can't be download from serious Page, and don't be free. Tested on: Windows XP...

Adobe Reader PDF - LibTiff Integer Overflow Code Execution

Adobe Reader PDF - LibTiff Integer Overflow Code Execution doc=''' Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: =8.3.0, =9.3.0 CVE: 2010-0188 Author: villy villys777 at gmail.com Site: http://bugix-security.blogspot.com/ Tested : succesfully...

Windows写字板HTML帮助文件处理远程代码执行漏洞

写字板是Windows操作系统中附件所提供的简单文本编辑工具。 如果相对路径为参数的话hhctrl.ocx控件的HtmlHelpA函数就会打开当前目录中的CHM文件。攻击者可以诱骗用户打开与特制notepad.chm文件处于同一目录中的.txt文件，notepad.exe打开该文件后用户在文档中按下F1键获得帮助时就会以本地安全环境执行任意JavaScript代码。 经现场测试，该漏洞不仅适用于 Microsoft Windows XP SP3、Microsoft Windows 2000SP4，同样适用于Microsoft Windows Server 2003...

Microsoft Virtual PC Hypervisor Virtual Machine Bypass Vulnerability

Exploit for windows platform in category local exploits ===================================================================================== Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability...

Adobe Reader PDF - LibTiff Integer Overflow Code Execution

doc=''' Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: =8.3.0, =9.3.0 CVE: 2010-0188 Author: villy villys777 at gmail.com Site: http://bugix-security.blogspot.com/ Tested : succesfully tested on Adobe Reader 9.1/9.2/9.3 OS Windows XPSP2,SP3...

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Bugtraq ID:38764 Microsoft Virtual PC Hypervisor is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass memory protection mechanisms. Successfully exploiting this issue will allow attackers to gain access to sensitive information, overwrite arbitrary data, and gai...

Microsoft Virtual PC Flaw Lets Hackers Bypass Windows Defenses

An exploit writer at Core Security Technologies has discovered a serious vulnerability that exposes users of Microsoft’s Virtual PC virtualization software to malicious hacker attacks. The vulnerability, which is unpatched, essentially allows an attacker to bypass several major security mitigatio...

Adobe Acrobat Bundled LibTIFF Integer Overflow

This module exploits an integer overflow vulnerability in Adobe Reader and Adobe Acrobat Professional versions 8.0 through 8.2 and 9.0 through 9.3. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' class...

Adobe Acrobat Bundled LibTIFF Integer Overflow

$Id: adobelibtiff.rb 8833 2010-03-16 18:06:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Family Connections 2.2 SQL Injection

Exploit Title: Family Connections version 2.2 SQL Injection Date: March 15, 2010 Author: Blake Software Link: http://sourceforge.net/projects/fam-connections/files/Family%20Connections/2.2/FCMS2.2.zip/download Version: version 2.2 Tested on: Windows XP SP3 Multiple SQL Injection vulnerabilities a...

GOM Player 2.1.21 .avi Denial Of Service

Exploit Title: GOM PLAYER AVI File DoS Date: 14/3/2101 Author: Enigma7 Software Link: www.gomlab.com/eng/‏ Version: V 2.1.21 Tested on: Windows XP SP3 CVE : Code : !/usr/bin/perl print " GOM PLAYER V 2.1.21 -last- DoS .avi file EN|GMA7 Team By Z www.enigma7.net "; $bf =...

QuickZip 4.60.019 Stack Buffer Overflow

Exploit Title : QuickZip 4.60.019 Stack BOF - XP SP3 OSVDB-ID : 62781 Date : March 2nd 2010 Author : corelanc0d3r Bug found by : corelanc0d3r Software Link : http://www.quickzip.org/downloads.html Version : 4.60.019 OS : Windows Tested on : XP SP3 En VirtualBox - offset is 297. You may have to...

Open & Compact FTPd 1.2 Pre-Authentication Buffer Overflow

Exploit Title: Open & Compact FTPd 1.2 Pre-Authentication Buffer Overflow MSF Date: March 14, 2010 Author: Blake Version: 1.2 Tested on: XP SP3 Exploit causes the ftp server to crash so adduser, etc. payloads are most effective. require 'msf/core' class Metasploit3 'Open & Compact FTPd 1.2...

Liquid XML Studio 2010 8.061970 - LtXmlComHelp8.dll OpenFile() Remote Overflow

Liquid XML Studio 2010 8.061970 - LtXmlComHelp8.dll OpenFile Remote Overflow !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Embedthis Appweb 3.1.2 Remote DoS Exploit

Exploit for multiple platform in category dos / poc ========================================= Embedthis Appweb 3.1.2 Remote DoS Exploit ========================================= !/usr/bin/perl +------------------------------------------------------------------------+ | ....... | |...

PhpMyLogon 2 SQL Injection

Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the following for the username to login as the...