windows

Eudora Qualcomm WorldMail 9.0.333.0 – IMAPd Service UID Buffer Overflow

#!/usr/bin/python

HP Data Protector – ‘EXEC_BAR’ Remote Command Execution

import argparse

ImageMagick 6.8.8-4 – Local Buffer Overflow (SEH)

#!/usr/bin/perl

Easy CD-DA Recorder – ‘.pls’ Local Buffer Overflow (Metasploit)

##

Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection

Trustwave's SpiderLabs Security Advisory TWSL2014-003:

Titan FTP Server 10.32 Build 1816 – Directory Traversal

"Titan FTP Server Directory Traversal Vulnerabilities"

Microsoft Windows – TrackPopupMenuEx Win32k NULL Page (MS13-081) (Metasploit)

##

KingScada – kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)

##

Publish-It 3.6d – ‘.pui’ Local Buffer Overflow (SEH)

#!/usr/bin ruby env

OneHTTPD 0.8 – Crash (PoC)

# Exploit Title: onehttpd 0.8 Crash PoC

Publish-It 3.6d – Buffer Overflow

Core Security - Corelabs Advisory

Asseco SEE iBank FX Client 2.0.9.3 – Local Privilege Escalation

Asseco SEE iBank FX Client icacls RichClient.exe

IBM Business Process Manager – User Account Reconfiguration

Exploit Title: IBM BMPS (BPM) User account reconfiguration/Privilege Escalation/Information Disclosure

XnView 1.92.1 – Command-Line Arguments Buffer Overflow

// source: https://www.securityfocus.com/bid/28259/info

Adrenalin Player 2.2.5.3 – ‘.m3u’ Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

#!/usr/bin env ruby

haneWIN DNS Server 1.5.3 – Remote Buffer Overflow (SEH)

#!/usr/bin/python

PCMan FTP Server 2.07 – ‘CWD’ Remote Buffer Overflow

# Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow

PCMan FTP Server 2.07 – ‘ABOR’ Remote Buffer Overflow

# Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow

Oracle Outside In MDB – File Parsing Stack Buffer Overflow (PoC)

#!/usr/bin/python

Ability Mail Server 2013 -Persistent Cross-Site Scripting / Cross-Site Request Forgery (Password Reset)

these configurations*

Ammyy Admin 3.2 – Authentication Bypass

Title:

HP Data Protector – Backup Client Service Directory Traversal (Metasploit)

##

Daum Game 1.1.0.5 – ActiveX ‘IconCreate Method’ Remote Stack Buffer Overflow

MW6 Technologies MaxiCode – ActiveX ‘Data’ Buffer Overflow (PoC)

MW6 Technologies Datamatrix – ActiveX ‘Data’ Buffer Overflow

MW6 Technologies Aztec – ActiveX ‘Data’ Buffer Overflow (PoC)

NCH Software Express Burn Plus 4.68 – ‘.EBP’ Project File Buffer Overflow

#!/usr/local/bin/perl

MuPDF 1.3 – ‘xps_parse_color()’ Stack Buffer Overflow

=============================================================

haneWIN DNS Server 1.5.3 – Denial of Service

###########################################################

SoapUI 4.6.3 – Remote Code Execution

# Exploit Title: SoapUI Remote Code Execution

IBM Forms Viewer – Unicode Buffer Overflow (Metasploit)

##

IcoFX – Local Stack Buffer Overflow (Metasploit)

##

CCProxy 7.3 – Integer Overflow

#!/usr/bin/env python

DirectControlTM 3.1.7.0 – Multiple Vulnerabilities

DirectControlTM Version 3.1.7.0 - Multiple Vulnerabilties

Ofilter Player 1.1 – ‘.wav’ Integer Division by Zero

Huawei Technologies du Mobile Broadband 16.0 – Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation

RealNetworks RealPlayer 16.0.3.51/16.0.2.32 – ‘.rmp’ Version Attribute Buffer Overflow

#!/usr/bin/perl

Easy Karaokay Player 3.3.31 – ‘.wav’ Integer Division by Zero

#!/usr/bin/python

Hancom Office – ‘.hml’ File Processing Heap Buffer Overflow

source: https://www.securityfocus.com/bid/64499/info

Microsoft Windows Kernel – ‘win32k.sys’ Integer Overflow (MS13-101)

Core Security - Corelabs Advisory

Adobe Reader ToolButton – Use-After-Free (Metasploit)

##

Microsoft Windows – ‘ndproxy.sys’ Local Privilege Escalation (Metasploit)

##

QuickHeal AntiVirus 7.0.0.1 – Local Stack Overflow

Document Title:

Ability Mail Server 2013 3.1.1 – Web UI Persistent Cross-Site Scripting

#!/usr/bin/env python

VUPlayer 2.49 – ‘.m3u’ File Universal Buffer Overflow (DEP Bypass) (2)

# VUPlayer 2.49 (.M3U) Exploit(Universal buffer overflow/DEP bypass)

PotPlayer 1.5.42509 Beta – Integer Division by Zero Denial of Service

###########################################################

Castripper 2.50.70 – ‘.pls’ DEP Bypass

# Castripper 2.50.70 (.pls) exploit (Stack buffer overflow/DEP bypass)

EMC Data Protection Advisor DPA Illuminator – EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution

HP LoadRunner EmulationAdmin – Web Service Directory Traversal (Metasploit)

##

IcoFX 2.5.0.0 – ‘.ico’ Buffer Overflow (PoC)

Core Security - Corelabs Advisory