windows

Microsoft Excel – HFPicture Record Parsing Remote Code Execution

'''

Chalk Creek Media Player 1.0.7 – ‘.mp3’ / ‘.wma’ Denial of Service

# Exploit Title: Chalk Creek Media Player 1.0.7 .mp3 and .wma DOS

Axigen Webmail 1.0.1 – Directory Traversal

source: https://www.securityfocus.com/bid/43230/info

Integard Pro 2.2.0.9026 – Windows 7 ROP-Code (Metasploit)

# Exploit Title: Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

MP3 Workstation 9.2.1.1.2 – Local Overflow (SEH)

#MP3 Workstation Version 9.2.1.1.2 SEH exploit

Ipswitch Imail Server – List Mailer Reply-To Address Memory Corruption

'''

Novell iPrint Client Browser Plugin – ExecuteRequest debug Stack Overflow

AA SMTP Server 1.1 – Crash (PoC)

=========================

RealPlayer – FLV Parsing Integer Overflow

'''

Kingsoft AntiVirus 2010.04.26.648 – Kernel Buffer Overflow

#!/usr/bin/python

Adobe Acrobat and Reader – ‘pushstring’ Memory Corruption

'''

HP Data Protector Media Operations 6.11 (Multiple Modules) – Null Pointer Dereference Denial of Service

#Exploit Title: HP Data Protector Media Operations 6.11 Multiple NULL Pointer Dereference Local DoS (0day)

Microsoft Word 2007 SP2 – sprmCMajority Buffer Overflow

'''

Webkit (Apple Safari < 4.1.2/5.0.2 / Google Chrome < 5.0.375.125) - Memory Corruption

TITLE: WEBKIT (APPLE SAFARI < 4.1.2/5.0.2 & GOOGLE CHROME < 5.0.375.125) MEMORY CORRUPTION VULNERABILITY

Excel RTD – Memory Corruption

'''

Acoustica MP3 Audio Mixer 2.471 – Extended .M3U Directives (SEH)

# Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH

Mozilla Firefox 3.6.3 – XSLT Sort Remote Code Execution

'''

Microsoft Visio 2002 – ‘.DXF’ Local Stack Overflow

'''

Microsoft Windows – Local Procedure Call (LPC) Privilege Escalation

// source: https://www.securityfocus.com/bid/43860/info

Internet Download Accelerator 5.8 – Remote Buffer Overflow (PoC)

QQPlayer 2.3.696.400p1 – ‘.wav’ Denial of Service

#!/usr/bin/python

ColdUserGroup 1.06 – Blind SQL Injection

#!/usr/bin/python

ColdOfficeView 2.04 – Multiple Blind SQL Injections

# ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities

ColdBookmarks 1.22 – SQL Injection

# ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability

ColdCalendar 2.06 – SQL Injection

#!/usr/bin/python

Adobe Acrobat and Reader 9.3.4 – ‘acroform_PlugInMain’ Memory Corruption

source: https://www.securityfocus.com/bid/42998/info

Microsoft Internet Explorer 7/8 – CSS Handling Cross Domain Information Disclosure

source: https://www.securityfocus.com/bid/42993/info

HP OpenView Network Node Manager (OV NNM) – ‘webappmon.exe execvp_nc’ Remote Code Execution

'''

Virtual DJ Trial 6.1.2 – Buffer Overflow Crash (SEH) (PoC)

#Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC

Microsoft MPEG Layer-3 – Remote Command Execution

'''

VideoLAN VLC Media Player < 1.1.4 - '.xspf smb://' URI Handling Remote Stack Overflow (PoC)

#!/usr/bin/python

Microsoft Movie Maker – Remote Code Execution (MS10-016)

'''

Intel Video Codecs 5.0 – Remote Denial of Service

Intel Video Codecs 5 Remote Denial of Service

FFDshow – Overflow (SEH) Exception Leading to Null Pointer on Read

FFDshow SEH Exception leading to NULL pointer on Read

Trend Micro Internet Security Pro 2010 – ActiveX ‘extSetOwner()’ Remote Code Execution (2)

Apple QuickTime FlashPix NumberOfTiles – Remote Code Execution

'''

Autodesk MapGuide Viewer – ActiveX Denial of Service

# Exploit Title: Autodesk MapGuide Viewer ActiveX(MGAXCTRL.DLL)Overflow Vulnerability

tftp desktop 2.5 – Directory Traversal

+------------------------------------------------------------------------+

TFTPDWIN 0.4.2 – Directory Traversal

+------------------------------------------------------------------------+

Adobe Acrobat Reader and Flash Player – ‘newclass’ Invalid Pointer

'''

LeadTools ActiveX common dialogs 16.5 – Multiple Vulnerabilities

LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities

UltraVNC 1.0.8.2 – DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42846/info

Microsoft Plug and Play Service – Overflow (MS05-039) (Metasploit)

##

Apple QuickTime – ‘_Marshaled_pUnk’ Backdoor Client-Side Arbitrary Code Execution

Original Source: http://reversemode.com/index.php?option=com_content&task=view&id=69&Itemid=1

Mereo 1.9.2 – Remote HTTP Server Denial of Service

#!/usr/bin/python

SnackAmp 3.1.2 – ‘.wav’ Buffer Overflow (PoC)

# Exploit Title: SnackAmp 3.1.2 Malicious WAV Buffer Overflow Vulnerability (POC)

SnackAmp 3.1.2 – SMP Buffer Overflow (SEH)

# Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability (SEH)

LeadTools ActiveX Raster Twain 16.5 – ‘LtocxTwainu.dll’ Buffer Overflow (PoC)

LEADTOOLS ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Remote Buffer Overflow PoC

Bloodshed Dev-C++ 4.9.9.2 – Multiple EXE Loading Arbitrary Code Executions

// source: https://www.securityfocus.com/bid/42737/info

Acunetix Web Vulnerability Scanner – DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42697/info