windows

RM Downloader 2.7.5.400 – Local Buffer Overflow (Metasploit)

###

Adobe Flash Player – UncompressViaZlibVariant Uninitialized Memory (Metasploit)

##

Wing FTP Server Admin 4.4.5 – Multiple Vulnerabilities

Document Title:

Foxit Reader PDF 7.1.3.320 – Parsing Memory Corruption

#####################################################################################

i.FTP 2.21 – Overflow Crash (SEH) (PoC)

# iFTP 2.21 SEH overwritten Crash PoC

UniPDF 1.2 – ‘xml’ Buffer Overflow Crash (PoC)

# Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC

Apple iTunes 10.6.1.7 – ‘.pls’ Title Buffer Overflow

# Exploit Title: Apple Itunes PLS title buffer overflow

Free MP3 CD Ripper 2.6 2.8 (Windows 7) – ‘.wav’ File Buffer Overflow (SEH) (DEP Bypass)

#!/usr/bin/python

Free MP3 CD Ripper 2.6 2.8 – ‘.wav’ File Buffer Overflow (SEH)

#!/usr/bin/env perl

Quick Search 1.1.0.189 – search textbox Buffer Overflow (SEH Unicode) (Egghunter)

#!/usr/bin/perl

MooPlayer 1.3.0 – ‘m3u’ Local Buffer Overflow (SEH) (2)

#!/usr/bin/perl

Adobe Flash Player – copyPixelsToByteArray Integer Overflow (Metasploit)

##

Oracle – Outside-In ‘.DOCX’ File Parsing Memory Corruption

#####################################################################################

Oracle Hyperion Smart View for Office 11.1.2.3.000 – Crash (PoC)

# Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office

Microsoft Windows – ‘HTTP.sys’ HTTP Request Parsing Denial of Service (MS15-034)

#Tested on Win Srv 2012R2.

Microsoft Windows – ‘HTTP.sys’ (PoC) (MS15-034)

UNTESTED - MS15-034 Checker

Samsung iPOLiS – ReadConfigValue Remote Code Execution

Adobe Flash Player – casi32 Integer Overflow (Metasploit)

##

Lenovo System Update – Local Privilege Escalation (Metasploit)

##

SolarWinds Firewall Security Manager 6.6.5 – Client Session Handling (Metasploit)

##

WebGate eDVR Manager 2.6.4 – Connect Method Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – SiteChannel Property Stack Buffer Overflow

WebGate WinRDS 2.0.8 – PlaySiteAllChannel Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – AudioOnlySiteChannel Stack Buffer Overflow

WebGate WESP SDK 1.2 – ChangePassword Stack Overflow

Palo Alto Traps Server 3.1.2.1546 – Persistent Cross-Site Scripting

#!/usr/bin/ruby

Adobe Flash Player – ByteArray With Workers Use-After-Free (Metasploit)

##

IDM 6.20 – Local Buffer Overflow

#!/usr/bin/env python

WebGate eDVR Manager 2.6.4 – SiteName Stack Overflow

WebGate Control Center 4.8.7 – GetThumbnail Stack Overflow

WebGate WinRDS 2.0.8 – StopSiteAllChannel Stack Overflow

WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability (0Day)

Acunetix 9.5 – OLE Automation Array Remote Code Execution

#!/usr/bin/python

WebGate eDVR Manager – Remote Stack Buffer Overflow

RM Downloader 2.7.5.400 – Local Buffer Overflow

#!/usr/bin/env python

Mini-stream Ripper 2.7.7.100 – Local Buffer Overflow

#!/usr/bin/env python

Adobe Flash Player – Arbitrary Code Execution

Source: https://github.com/SecurityObscurity/cve-2015-0313

Bsplayer 2.68 – HTTP Response Universal

#!/usr/bin/python

Free MP3 CD Ripper 2.6 – ‘.wav’ Local Buffer Overflow

#!/usr/bin/python

Publish-It – ‘.PUI’ Local Buffer Overflow (SEH) (Metasploit)

##

FastStone Image Viewer 5.3 – ‘.tga’ Crash (PoC)

# Exploit Title : FastStoneImage Viewer (Corrupted tga) IMAGESPECIFICATION.Width Crash POC

Microsoft Windows 8.1 – Local WebDAV NTLM Reflection Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=222

Fortinet Single Sign On – Stack Overflow

1. Advisory Information

Adobe Flash Player – PCRE Regex (Metasploit)

##

Spybot Search & Destroy 1.6.2 Security Center Service – Local Privilege Escalation

Spybot Search & Destroy 1.6.2 Security Center Service Privilege Escalation

IPass Control Pipe – Remote Command Execution (Metasploit)

##

Foxit Reader 7.0.6.1126 – Unquoted Service Path Privilege Escalation

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege

Intel Network Adapter Diagnostic Driver – IOCTL Handling

Intel Network Adapter Diagnostic Driver IOCTL Handling Vulnerability

Adobe Flash Player – ByteArray UncompressViaZlibVariant Use-After-Free (Metasploit)

##

Microsoft Windows – Text Services Memory Corruption (MS15-020)

#####################################################################################

Foxit Products GIF Conversion – ‘DataSubBlock’ Memory Corruption

#####################################################################################