Microsoft Internet Explorer 678 - winhlp32.exe MsgBox() Remote Code Execution

Microsoft Internet Explorer 678 - winhlp32.exe MsgBox Remote Code Execution Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= ProSSHD v1.2 20090726 Buffer Overflow Exploit ============================================= Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX...

ProSSHD 1.2 20090726 - Remote Buffer Overflow

ProSSHD 1.2 20090726 - Remote Buffer Overflow Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A...

ProSSHD 1.2 20090726 - Remote Buffer Overflow

Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A kernel32.CreatePipe EDI 0012F3D8 ASCII...

Microsoft Internet Explorer 6/7/8 - 'winhlp32.exe MsgBox()' Remote Code Execution

Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise th...

Windows XP Home Edition SP3 English calc.exe 37 bytes

Windows XP Home Edition SP3 English calc.exe 37 bytes. Shellcode exploit for win32 platform / Windows Xp Home edition SP3 english calc.exe 37 bytes shellcode by: Hazem mofeed The Shellcode: http://www.exploit-db.com/exploits/11598 Modified to working In SP3, Home: www.pentestlabs.com greetz:...

win32/xp sp3 English (calc.exe) 37 bytes

Exploit for win32 platform in category shellcode ======================================== win32/xp sp3 English calc.exe 37 bytes ======================================== / Windows Xp Home edition SP3 english calc.exe 37 bytes shellcode by: Hazem mofeed The Shellcode:...

Majoda CMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Majoda CMS Auth Bypass SQL Injection Vulnerability ==================================================== Exploit Title: Majoda CMS Auth Bypass SQL Injection Vulnerability Date: 2010-02-28...

win32/xp sp2 English (calc.exe) 37 bytes

Exploit for win32 platform in category shellcode ========================================================= Windows Xp Home Edition SP2 English calc.exe 37 bytes ========================================================= / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem...

Windows Xp Home Edition SP2 English ( calc.exe ) 37 bytes

No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = "\xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0"...

Windows Xp Home Edition SP2 English calc.exe 37 bytes

Windows Xp Home Edition SP2 English calc.exe 37 bytes. Shellcode exploit for win32 platform / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil =...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer 1.04 - .orb File Local Universal Overflow (SEH)

Orbital Viewer 1.04 - .orb File Local Universal Overflow SEH !/usr/bin/python Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer v1.04 (.orb) 0day Local Universal SEH Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit ===================================================================== !/usr/bin/python Orbital Viewer...

CVE-2010-0705

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...

CVE-2010-0705

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...

Mozilla Firefox v3.6 URL Spoofing Vulnerability

No description provided by source. Tested on: Windows XP SP2/3 Code : You can trick a user into accessing a malicious website by using the following exploit The first link would be the malicious one. html body div id="mydiv" onmouseover="document.location='http://www.youtube.com/watch?v=oHg5S...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Microsoft DirectX DirectShow AVI文件解析堆溢出漏洞（MS10-013）

BUGTRAQ ID: 38112 CVE ID: CVE-2010-0250 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析AVI文件中的特定类型视频流时没有正确的使用分配所用的长度字段，导致分配了不充分的缓冲区。用户打开特制的AVI文件就可以触发堆溢出，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Apple Safari 4.0.4 Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC)

Apple Safari 4.0.4 Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service PoC Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC Thank you Rad L. Sneak Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC Tested on WinXP SP3 and Windows ...