Winamp 5.57 - Browser IE Denial of Service

Winamp 5.57 - Browser IE Denial of Service From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento, to open browser press ALT + X drag or load file to browser and keep smile : +---------------------------------------------------------------------------------...

Winamp 5.57 (Browser) IE Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================== Winamp 5.57 Browser IE Denial of Service Exploit ================================================== From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento,...

EasyFTP Server 1.7.0.2 - CWD Remote Buffer Overflow

Tested on: XP SP3 Eng !/usr/bin/python import socket, sys print """ Easy FTP Server 1.7.0.2 Remote BoF Discovered by: athleet jonbutler88atgooglemaildotcom """ if lensys.argv != 3: print "Usage: ./easyftp.py " sys.exit1 target = sys.argv1 port = intsys.argv2 Calc.exe PoC shellcode - Tested on XP...

WSC CMS SQL Injection

Exploit Title: WSC CMS Bypass SQL Injection Vulnerability Date: 2010-02-19 Author: Phenom Software Link: Version: Tested on: windows xp sp3 CVE : Code : ------------------------------------------------------ ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ /...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

Microsoft画图工具JPEG图形处理整数溢出溢出漏洞（MS10-005）

BUGTRAQ ID: 38042 CVE ID: CVE-2010-0028 画图是Windows操作系统中默认捆绑的图形编辑软件。 画图工具在解码JPEG图形时存在可导致堆溢出的整数溢出漏洞，用户受骗打开了特制的JPEG图形文件就会导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000SP4 临时解决方法： 禁用或删除画图工具。 厂商补丁： Microsoft...

Rising Online Virus Scanner v22.0.0.5 ActiveX Control DoS (Stack overflow)

No description provided by source. Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID:...

ZoIPer v2.22 Call-Info Remote Denial Of Service

Exploit for unknown platform in category dos / poc ================================================================== Vulnerability in Zoiper softphone version 2.22 - Denial Of Service ==================================================================...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow Denial of Service Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID:...

Open Source Classifieds v1.1.0 Alpha (OSClassi) Mult Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Open Source Classifieds v1.1.0 Alpha OSClassi Mult Vulnerabilities ==================================================================== / / / | | \ | |/ | ' \ / | / / / |...

Rising Online Virus Scanner 22.0.0.5 - ActiveX Control Stack Overflow (Denial of Service)

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Tested on: Windows XP sp3 ProgID: RavOLCtlLib.RavOnline ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E Member: Scan File:...

Rising Online Virus Scanner Active-X Denial Of Service

Exploit Title: Rising Online Virus Scanner ActiveX Control DoS Stack overflow Date: 17/02/2010 Author: wirebonder Software Link: http://www.rising-global.com/products/online-scanner-intro.html Version: 22.0.0.5 Tested on: Windows XP sp3 CVE : n/a Code : ProgID: RavOLCtlLib.RavOnline ClassID:...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

Easy~Ftp Server v1.7.0.2 Post-Authentication BoF (PoC)

No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/2010 Software link:...

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224...

Wireshark LWRES dissector buffer overflow

Added: 02/17/2010 CVE: CVE-2010-0304 BID: 37985 OSVDB: 61987 Background Wireshark is a network packet analyzer. Problem A buffer overflow vulnerability in the LWRES dissector allows command execution when a user sends a specially crafted datagram over a network which is being analyzed by Wireshar...

Wireshark LWRES dissector buffer overflow

Added: 02/17/2010 CVE: CVE-2010-0304 BID: 37985 OSVDB: 61987 Background Wireshark is a network packet analyzer. Problem A buffer overflow vulnerability in the LWRES dissector allows command execution when a user sends a specially crafted datagram over a network which is being analyzed by Wireshar...

iTunes 9.0 Buffer Overflow

Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224 JMPBUF = 0x8fe31290 STRDUP = 0x92EED110 8fe24459 jmp...

Auktionshaus 4 SQL Injection

Exploit Title: Auktionshaus V.4 SQL Injection news.php Date: 17.02.2010 Author: Easy Laster Tested on: windows xp Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP...

Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution

$Id: dxstudioplayerexec.rb 8541 2010-02-17 20:14:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...