Microsoft Internet Explorer - iepeers.dll Use-After-Free (Metasploit)

Microsoft Internet Explorer - iepeers.dll Use-After-Free Metasploit ieiepeerspointer.rb Microsoft Internet Explorer iepeers.dll use-after-free exploit for the Metasploit Framework Tested successfully on the following platforms: - Microsoft Internet Explorer 7, Windows Vista SP2 - Microsoft Intern...

Green Dam - URL Processing Buffer Overflow (Metasploit)

$Id: greendamurl.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability 1. Advisory Information Title: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability...

RhinoSoft Serv-U FTP Server - Session Cookie Buffer Overflow (Metasploit)

$Id: servusessioncookie.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Orbital Viewer ORB File Parsing Buffer Overflow

This module exploits a stack-based buffer overflow in David Manthey's Orbital Viewer. When processing .ORB files, data is read from file into a fixed-size stack buffer using the fscanf function. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary code by...

Easy~FTP Server v1.7.0.2 CWD Command Buffer Overflow

New Ticket: EasyFTP BoF meta Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested on: Windows XP SP3 CVE : require 'msf/core' class Metasploit3 'EasyFTP Server v1.7.0.2 CWD Command Buffer Overflow', 'Description' = %q This module exploits a stack overflow in the CWD ve...

QuickZip 4.x Local Universal Buffer Overflow

!/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version : 4.60 OS : Windows Tested on : XP SP...

Easy FTP Server v1.7.0.2 CWD Remote BoF - MSF Module

Exploit for unknown platform in category remote exploits ==================================================== Easy FTP Server v1.7.0.2 CWD Remote BoF - MSF Module ==================================================== Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested...

PHP File Sharing System v1.5.1 Multiple Vulnerabilities

No description provided by source. Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author: blake Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal http://192.168.1.149/fss/index.php?cam=/../../../../../../../.. 3 Shell...

QuickZip 4.x Buffer Overflow

!/usr/bin/python Exploit Title : QuickZip 4.x .zip Buffer Overflow Exploit 2 Date : 9/3/2010 Original author : corelanc0d3r & mrme Second Exploit : Dzattacker dzattackerathotmaildotfr Software Link : http://www.quickzip.org/downloads.html Version : 4.60 OS : Windows Tested on : XP SP3 En Type of...

PHP File Sharing System 1.5.1 Directory Traversal / XSS / Shell Upload

Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Date: March 8, 2010 Author: blake Download: http://sourceforge.net/projects/phpfilesadmin/ Version: 1.5.1 Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal...

QuickZip 4.x (.zip) Buffer Overflow Exploit #2

Exploit for unknown platform in category local exploits ============================================== QuickZip 4.x .zip Buffer Overflow Exploit 2 ============================================== !/usr/bin/python Exploit Title : QuickZip 4.x .zip Buffer Overflow Exploit 2 Date : 9/3/2010 Original...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow (Metasploit)

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow Metasploit Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested on: Windows XP SP3 CVE : require 'msf/core' class Metasploit3 'EasyFTP Server v1.7.0.2 CWD Command Buffer Overflow', 'Description' = %q This module...

PHP File Sharing System 1.5.1 - Multiple Vulnerabilities

Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author: blake Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal http://192.168.1.149/fss/index.php?cam=/../../../../../../../.. 3 Shell through file upload can upload php...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow (Metasploit)

Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested on: Windows XP SP3 CVE : require 'msf/core' class Metasploit3 'EasyFTP Server v1.7.0.2 CWD Command Buffer Overflow', 'Description' = %q This module exploits a stack overflow in the CWD verb in EasyFTP Server. You mus...

Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow

Advisory ID Internal CORE-2009-0813 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow Advisory Id: CORE-2009-0813 Advisory URL:http://www.coresecurity.com/content/movie-maker-heap-overflow Date published: 2010-03-09 Date of last update:...

Flare <= 0.6 Local Heap Overflow DoS

Exploit for multiple platform in category dos / poc ==================================== Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI...

Microsoft Windows XP/2000 - Help File Relative Path Remote Command Execution

source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by enticing a victim to load help files when working in a directory containing crafte...

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...

Namoroka 3.6 Alpha 1 Remote Memory Corrupt (Local Crash Exploit)

Exploit for unknown platform in category dos / poc ================================================================ Namoroka 3.6 Alpha 1 Remote Memory Corrupt Local Crash Exploit ================================================================ function DoS var buffer = '\x41'; for i...